What’s Vulnerable › Vulnerabilities

CVE-2017-15300

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-10-15 · updated 2026-06-17

Description

The miner statistics HTTP API in EWBF Cuda Zcash Miner Version 0.3.4b hangs on incoming TCP connections until some sort of request is made (such as "GET / HTTP/1.1"), which allows for a Denial of Service attack preventing a user from viewing their mining statistics by an attacker opening a session with telnet or netcat and connecting to the miner on the HTTP API port.

Affected products

• Ewbf Cuda Zcash Miner: 0.3.4b

References

• https://bitcointalk.org/index.php?topic=1707546.msg23016970#msg23016970
• https://www.legacysecuritygroup.com/cve-2017-15300.html
• https://bitcointalk.org/index.php?topic=1707546.msg23016970#msg23016970
• https://www.legacysecuritygroup.com/cve-2017-15300.html

Get alerted when CVE-2017-15300 or the next vulnerability affects your stack