VDB
GSD-2019-19753
GSD-2019-19753
PUBLISHED
CVSS 9.100000381469727 CRITICAL
SimpleMiningOS through v1259 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: the vendor indicated that they have no plans to fix this, and discourage deployment using public IPv4.
Risk Scores
CVSS v3.1
9.100000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| stupidthings.net | simpleminingos | 0 |
| n/a | n/a | n/a |
Timeline
- Apr 30, 2024 CVE Published