CVE-2022-24657

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Goldshell ASIC Miners v2.1.x was discovered to contain hardcoded credentials which allow attackers to remotely connect via the SSH protocol (port 22).

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-798

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/goldshellminer/firmwareThird Party Advisory
https://jamesachambers.com/cryptocurrency-asic-miners-security-and-hacking-audit/Exploit, Mitigation, Third Party Advisory
https://github.com/goldshellminer/firmwareThird Party Advisory
https://jamesachambers.com/cryptocurrency-asic-miners-security-and-hacking-audit/Exploit, Mitigation, Third Party Advisory

Timeline

Published: Jul 20, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-246597.5Goldshell ASIC Miners v2.2.1 and below was discovered to contain a path traversal vulnerability which allows unauthenticated attackers to re CVE-2022-24669.8It was found that Quarkus 2.10.x does not terminate HTTP requests header context which may lead to unpredictable behavior.CVE-2022-246607.5The debug interface of Goldshell ASIC Miners v2.2.1 and below was discovered to be exposed publicly on the web interface, allowing attackers CVE-2022-246617.8A vulnerability has been identified in Simcenter STAR-CCM+ Viewer (All versions < V2022.1). The starview+.exe contains a memory corruption v CVE-2022-246638.8PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress shortcodes, which can be used by an CVE-2022-246648.8PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress metaboxes, which could be used by a CVE-2022-246658.8PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via a WordPress gutenberg block by any user able CVE-2022-246667.5A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 fra CVE-2022-246677.5A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HPACK-enco CVE-2022-246687.5A program using swift-nio-http2 is vulnerable to a denial of service attack caused by a network peer sending ALTSVC or ORIGIN frames. This a CVE-2022-246696.5It may be possible to gain some details of the deployment through a well-crafted attack. This may allow that data to be used to probe intern CVE-2022-24679.8A vulnerability has been found in SourceCodester Garage Management System 1.0 and classified as critical. This vulnerability affects unknown