What’s Vulnerable › Vulnerabilities

CVE-2019-19753

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-04-30 · updated 2026-06-17
• Weakness: CWE-321

Description

SimpleMiningOS through v1259 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: the vendor indicated that they have no plans to fix this, and discourage deployment using public IPv4.

Affected products

• Stupidthings.Net Simpleminingos: through 1259

References

• https://rsaxvc.net/blog/2020/4/10/Widespread_re-use_of_SSH_Host_Keys_in_Ethereum_Mining_Rig_Operating_Systems.html
• https://simplemining.net/page/changelog
• https://rsaxvc.net/blog/2020/4/10/Widespread_re-use_of_SSH_Host_Keys_in_Ethereum_Mining_Rig_Operating_Systems.html
• https://simplemining.net/page/changelog

Get alerted when CVE-2019-19753 or the next vulnerability affects your stack