Vulnerability record · CVE-2017-16930 · published 5 December 2017
CVE-2017-16930: Claymore dual miner project claymore dual miner memory buffer overflow vulnerability
Claymore Dual Miner Project · Claymore Dual Miner
The remote management interface on the Claymore Dual GPU miner 10.1 allows an unauthenticated remote attacker to execute arbitrary code due to a stack-based buffer overflow in the request handler. This can be exploited via a long API request that is mishandled during logging.
Description
The remote management interface on the Claymore Dual GPU miner 10.1 allows an unauthenticated remote attacker to execute arbitrary code due to a stack-based buffer overflow in the request handler. This can be exploited via a long API request that is mishandled during logging.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| http://www.openwall.com/lists/oss-security/2017/12/04/3 | Mailing ListThird Party Advisory |
| https://github.com/tintinweb/pub/tree/master/pocs/cve-2017-16930 | Third Party Advisory |
| https://www.exploit-db.com/exploits/43231/ | ExploitThird Party AdvisoryVDB Entry |
| http://www.openwall.com/lists/oss-security/2017/12/04/3 | Mailing ListThird Party Advisory |
| https://github.com/tintinweb/pub/tree/master/pocs/cve-2017-16930 | Third Party Advisory |
| https://www.exploit-db.com/exploits/43231/ | ExploitThird Party AdvisoryVDB Entry |
Track CVE-2017-16930 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2017-16930), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.
