CVEvulnerability
CVE-2022-36601
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2022-09-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
The Eclipse TCF debug interface in JasMiner-X4-Server-20220621-090907 and below is open on port 1534. This issue allows unauthenticated attackers to gain root privileges on the affected device and access sensitive data or execute arbitrary commands.
Affected configurations
• jinglemining jasminer x4 server firmware (<= 20220621-090907)
References
- https://jamesachambers.com/cryptocurrency-asic-miners-security-and-hacking-audit/ Exploit, Third Party Advisory
- https://jamesachambers.com/cryptocurrency-asic-miners-security-and-hacking-audit/ Exploit, Third Party Advisory