What’s Vulnerable › Vulnerabilities

CVE-2022-36604

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-09-01 · updated 2026-06-17
• Weakness: CWE-306

Description

An access control issue in Canaan Avalon ASIC Miner 2020.3.30 and below allows unauthenticated attackers to arbitrarily change user passwords via a crafted POST request.

Affected products

• Canaan Avalon Asic Miner Firmware: through 2020.3.30

References

• https://jamesachambers.com/cryptocurrency-asic-miners-security-and-hacking-audit/
• https://jamesachambers.com/cryptocurrency-asic-miners-security-and-hacking-audit/

Get alerted when CVE-2022-36604 or the next vulnerability affects your stack