CVE-2018-6317
mediumpriority · attend · 61EPSS 0.437 · 99 %ileexploit · functionalEUUSEPSS · scored 2026-10-26
The remote management interface in Claymore Dual Miner 10.5 and earlier is vulnerable to an unauthenticated format string vulnerability, allowing remote attackers to read memory or cause a denial of service.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–critical · 6.4–9.1
weaknesses
The CWE weakness classes this flaw belongs to.
exploits (2)
Public proof-of-concept and weaponised exploit code.
- auxiliary/dos/tcp/claymore_dosClaymore Dual GPU Miner Format String dos attackfunctional · metasploit
- EDB-43972Claymore Dual GPU Miner 10.5 - Format StringPoC · exploit_db
affected products (2)
Products and version ranges known to be affected.
- claymore dual miner project claymore dual miner≤ 10.5nvdUScpe:2.3:a:claymore_dual_miner_project:claymore_dual_miner:*:*:*:*:*:*:*:*
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (6)
External citations — patches, advisories, analysis.
- https://medium.com/@res1n/claymore-dual-gpu-miner-10-5-format-strings-vulnerability-916ab3d2db30cnnvd
- https://www.dualminer.org/en/Patchcnnvd
- https://medium.com/%40res1n/claymore-dual-gpu-miner-10-5-format-strings-vulnerability-916ab3d2db30enisa_euvd
- https://www.exploit-db.com/exploits/43972/enisa_euvd
- https://medium.com/%40res1n/claymore-dual-gpu-miner-10-5-format-strings-vulnerability-916ab3d2db30nvd
- https://www.exploit-db.com/exploits/43972/ExploitThird Party AdvisoryVDB Entrynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan