PatchTheCVECVE-2018-1000049: Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing
CVE-2018-1000049 is a high-severity flaw (CVSS 7.5) affecting claymore dual miner. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the miner API. The flaw can be exploited only if the software is executed with read/write mode enabled.
Why this priority
- High severity
- EPSS top 1%: very likely to be exploited
- Public exploit reference
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.5 (High) |
| Attack vector | Network (remote) |
| Attack complexity | High |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 76.9% (top 1%) |
| CISA exploited list | No |
| Weakness | CWE-20 |
| Published | 2018-02-09 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Public exploits and detection
Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.
- Exploit-DB: Nanopool Claymore Dual Miner - APIs Remote Code Execution (Metasploit)
- Exploit-DB: Nanopool Claymore Dual Miner 7.3 - Remote Code Execution
- Metasploit: Nanopool Claymore Dual Miner APIs RCE
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2018-1000049?
claymore dual miner: upgrade to newer than 7.3. Exact commands for each OS are on this page.
Is CVE-2018-1000049 being exploited?
CVE-2018-1000049 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2018-1000049 affect?
CVE-2018-1000049 affects claymore dual miner. Severity is high (CVSS 7.5). Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the miner API. The flaw can be exploited only if the software is executed with read/write mode enabled.
How urgent is CVE-2018-1000049?
Priority 56/100. High severity; EPSS top 1%: very likely to be exploited; Public exploit reference
Related CVEs
- CVE-2018-6317 CRITICAL 9.1 UPGRADE The remote management interface in Claymore Dual Miner 10.5 and earlier is vulnerable to an unauthenticated fo
- CVE-2017-16930 CRITICAL 9.8 DOWNGRADE The remote management interface on the Claymore Dual GPU miner 10.1 allows an unauthenticated remote attacker
- CVE-2017-16929 HIGH 8.1 DOWNGRADE The remote management interface on the Claymore Dual GPU miner 10.1 is vulnerable to an authenticated director