CVEs-PoC/2018/CVE-2018-1000049.md

CVE-2018-1000049

Description

Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the miner API. The flaw can be exploited only if the software is executed with read/write mode enabled.

POC

Reference

• http://packetstormsecurity.com/files/147678/Nanopool-Claymore-Dual-Miner-7.3-Remote-Code-Execution.html
• http://packetstormsecurity.com/files/148578/Nanopool-Claymore-Dual-Miner-APIs-Remote-Code-Execution.html
• https://www.exploit-db.com/exploits/44638/
• https://www.exploit-db.com/exploits/45044/

Github

No PoCs found on GitHub currently.