CVE-2022-24660 json
The debug interface of Goldshell ASIC Miners v2.2.1 and below was discovered to be exposed publicly on the web interface, allowing attacker…
published 2022-07-20 4 y ago modified 2026-06-17 4 mo ago also EUVD-2022-29535
- cvss
- 7.5
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.6%
- EPSS 0.6% chance of exploitation in 30 days, percentile 51%
- public exploits
- 0
- none known
Summary
The debug interface of Goldshell ASIC Miners v2.2.1 and below was discovered to be exposed publicly on the web interface, allowing attackers to access passwords and other sensitive information in plaintext.
Exploit prediction
0.64% chance of exploitation in the next 30 days, higher than 51% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- jamesachambers.com https://jamesachambers.com/cryptocurrency-asic-miners-security-and-hacking-audit/ referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Classification
- Weakness
-
- CWE-312 Cleartext Storage of Sensitive Information
References
-
jamesachambers.com
/cryptocurrency-asic-miners-security-and-hacking-audit/
exploit, mitigation, third-party-advisory
-
github.com
/goldshellminer/firmware
third-party-advisory
Sources
- CVE List CVE-2022-24660
- NVD CVE-2022-24660
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.