{"cvss":0.0,"datePublished":"2018-01-17T00:00:00Z","dateUpdated":"2018-01-17T00:00:00Z","description":"The remote management interface on the Claymore Dual GPU miner 10.1 is vulnerable to an authenticated directory traversal vulnerability exploited by issuing a specially crafted request, allowing a remote attacker to read/write arbitrary files. This can be exploited via ../ sequences in the pathname to miner_file or miner_getfile.","dueDate":"","id":"CVE-2017-16929","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"claymore_dual_miner","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"claymore_dual_miner_project claymore_dual_miner Improper Limitation of a Pathname to a Restricted Directory","vendor":"claymore_dual_miner_project"}