CVE-2018-10058

The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to execute arbitrary code due to a stack-based buffer overflow in the addpool, failover-only, poolquota, and save command handlers.

CVSS v3.0

8.8 HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

3.93% chance of exploitation in the next 30 days, 90th percentile

Published

2018-06-05

Updated

2024-08-05

Proof-of-concept exploits (1)

• tintinweb/pub/tree/master/pocs/cve-2018-10058

References

• CVE Record
• NVD entry

Related

• CVE-2017-18016
• CVE-2017-8798
• CVE-2018-10057
• CVE-2020-15690
• CVE-2018-10063
• CVE-2018-10054