CVE-2018-10058

PoC —

CVSS 3.0

8.8 high

EPSS

4%p90

Published

Jun 5, 2018 (Jun 5, 2018)

Modified

Jun 17, 2026

Description

The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to execute arbitrary code due to a stack-based buffer overflow in the addpool, failover-only, poolquota, and save command handlers.

Vendors: cgminer project bfgminer
Products: cgminer, bfgminer
Weakness: CWE-787
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.9%)

In the news0 stories

No ingested article mentions this CVE yet.