CVE-2022-24657
9.8 criticalEPSS 1.2%
Critical (9.8) in goldshell goldshell miner firmware. EPSS 1.2% chance of exploitation in the next 30 days.
Goldshell ASIC Miners v2.1.x was discovered to contain hardcoded credentials which allow attackers to remotely connect via the SSH protocol (port 22).
Severity
CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H- EPSS
- 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
- CWE
- CWE-798
- Published
- Modified
- Record from
- the NVD, synced
Affected
- goldshell:goldshell_miner_firmware
References
Check your stackJSON