Goldshell vulnerabilities
We track 3 vulnerabilities in Goldshell products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 20, 2022.
3vulnerabilities
1critical
2high
0exploited
8.3average CVSS score
Latest Goldshell vulnerabilities
- 7.5 High severity
Goldshell Miner Firmware: Cleartext Storage of Sensitive Information
The debug interface of Goldshell ASIC Miners v2.2.1 and below was discovered to be exposed publicly on the web interface, allowing attackers to access passwords and other sensitive information in plaintext.
- 7.5 High severity
Goldshell Miner Firmware: Improper Limitation of a Pathname to a Restricted Directory
Goldshell ASIC Miners v2.2.1 and below was discovered to contain a path traversal vulnerability which allows unauthenticated attackers to retrieve arbitrary files from the device.
- 9.8 Critical severity
Goldshell Miner Firmware: Use of Hard-coded Credentials
Goldshell ASIC Miners v2.1.x was discovered to contain hardcoded credentials which allow attackers to remotely connect via the SSH protocol (port 22).