Vulnetix
Try Vulnetix Request Demo
CVE-2019-19753 PUBLISHED CVSS 9.100000381469727 CRITICAL

SimpleMiningOS through v1259 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: the vendor indicated that they have no plans to fix this, and discourage deployment using public IPv4.

EPSS 0.16% · 37.1th percentile

Risk Scores

CVSS v3.1
9.100000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS Score
0.16%
37.1th percentile

Affected Products

VendorProductVersions
n/an/an/a, n/a
stupidthings.netsimpleminingos0, 0

Timeline

References

Open in Interactive Console →