CVE-2022-36601

The Eclipse TCF debug interface in JasMiner-X4-Server-20220621-090907 and below is open on port 1534. This issue allows unauthenticated attackers to gain root privileges on the affected device and access sensitive data or execute arbitrary commands.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://jamesachambers.com/cryptocurrency-asic-miners-security-and-hacking-audit/	Exploit Third Party Advisory
https://jamesachambers.com/cryptocurrency-asic-miners-security-and-hacking-audit/	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:jinglemining:jasminer_x4_server_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:jinglemining:jasminer_x4_server:-:*:*:*:*:*:*:*

History

21 Nov 2024, 07:13

Type	Values Removed	Values Added
References	~~() https://jamesachambers.com/cryptocurrency-asic-miners-security-and-hacking-audit/ - Exploit, Third Party Advisory~~	() https://jamesachambers.com/cryptocurrency-asic-miners-security-and-hacking-audit/ - Exploit, Third Party Advisory

08 Sep 2022, 14:08

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 9.8
CWE		NVD-CWE-Other
CPE		cpe:2.3:o:jinglemining:jasminer_x4_server_firmware:::::::: cpe:2.3:h:jinglemining:jasminer_x4_server:-:::::::*
References	~~(MISC) https://jamesachambers.com/cryptocurrency-asic-miners-security-and-hacking-audit/ -~~	(MISC) https://jamesachambers.com/cryptocurrency-asic-miners-security-and-hacking-audit/ - Exploit, Third Party Advisory

02 Sep 2022, 12:56

Type	Values Removed	Values Added
New CVE

Information

Published : 2022-09-01 21:15

Updated : 2024-11-21 07:13

NVD link : CVE-2022-36601

Mitre link : CVE-2022-36601

CVE.ORG link : CVE-2022-36601

JSON object : View

Products Affected

jinglemining

jasminer_x4_server_firmware
jasminer_x4_server

CWE

NVD-CWE-Other

{"id": "CVE-2022-36601", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2022-09-01T21:15:10.207", "references": [{"url": "https://jamesachambers.com/cryptocurrency-asic-miners-security-and-hacking-audit/", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://jamesachambers.com/cryptocurrency-asic-miners-security-and-hacking-audit/", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "The Eclipse TCF debug interface in JasMiner-X4-Server-20220621-090907 and below is open on port 1534. This issue allows unauthenticated attackers to gain root privileges on the affected device and access sensitive data or execute arbitrary commands."}, {"lang": "es", "value": "La interfaz de depuraci\u00f3n de Eclipse TCF en JasMiner-X4-Server versi\u00f3n 20220621-090907 y anteriores, est\u00e1 abierta en el puerto 1534. Este problema permite a atacantes no autenticados conseguir privilegios de root en el dispositivo afectado y acceder a datos confidenciales o ejecutar comandos arbitrarios"}], "lastModified": "2024-11-21T07:13:22.920", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:jinglemining:jasminer_x4_server_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7367B357-A875-4DA6-99D9-C7FA91D867C9", "versionEndIncluding": "20220621-090907"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:jinglemining:jasminer_x4_server:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "08058609-269F-438C-81F9-A7C0E1B7F77A"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}

9.8 /10