CyberSec.Space Logo
Back to CVE Browser

CVE-2021-40903

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0900%
EPSS Percentile24.60th
PublishedJun 17, 2022
Last ModifiedNov 21, 2024

Vulnerability Description

A vulnerability in Antminer Monitor 0.50.0 exists because of backdoor or misconfiguration inside a settings file in flask server. Settings file has a predefined secret string, which would be randomly generated, however it is static.

Affected Platforms (CPE)

📦
Antminer Monitor Project

Antminer Monitor

= 0.50.0

References & Advisories

🔗 https://github.com/anselal/antminer-monitor
🔗 https://packetstormsecurity.com/files/164048/Antminer-Monitor-0.5.0-Authentication-Bypass.html
🔗 https://www.exploit-db.com/exploits/50267
🔗 https://github.com/anselal/antminer-monitor
🔗 https://packetstormsecurity.com/files/164048/Antminer-Monitor-0.5.0-Authentication-Bypass.html
🔗 https://www.exploit-db.com/exploits/50267

Related Vulnerabilities

CVE-2021-4155610.0

sqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read (in the core interpreter) that can lead to ...

CVE-2021-3467910.0

Thycotic Password Reset Server before 5.3.0 allows credential disclosure.

CVE-2021-4422810.0

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration...

CVE-2021-021110.0

An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon ...