Directory traversal

2017-12-0509:29:00

PRIOn knowledge base

www.prio-n.com

7.9 High

AI Score

Confidence

High

0.02 Low

EPSS

Percentile

88.9%

JSON

The remote management interface on the Claymore Dual GPU miner 10.1 is vulnerable to an authenticated directory traversal vulnerability exploited by issuing a specially crafted request, allowing a remote attacker to read/write arbitrary files. This can be exploited via …/ sequences in the pathname to miner_file or miner_getfile.

CPENameOperatorVersion
claymore_dual_minereq10.1

CPE	Name	Operator	Version
	claymore_dual_miner	eq	10.1

References

www.openwall.com/lists/oss-security/2017/12/04/3

github.com/tintinweb/pub/tree/master/pocs/cve-2017-16929

www.exploit-db.com/exploits/43231/