PatchTheCVECVE-2018-6317: The remote management interface in Claymore Dual Miner 10.5 and earlier is vulnerable to an unauthenticated fo
CVE-2018-6317 is a critical-severity flaw (CVSS 9.1) affecting claymore dual miner. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
The remote management interface in Claymore Dual Miner 10.5 and earlier is vulnerable to an unauthenticated format string vulnerability, allowing remote attackers to read memory or cause a denial of service.
Why this priority
- Critical severity
- EPSS top 1%: very likely to be exploited
- Public exploit reference
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 9.1 (Critical) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 43.7% (top 1%) |
| CISA exploited list | No |
| Weakness | CWE-134 |
| Published | 2018-02-02 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Public exploits and detection
Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.
- Exploit-DB: Claymore Dual GPU Miner 10.5 - Format String
- Metasploit: Claymore Dual GPU Miner Format String dos attack
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2018-6317?
claymore dual miner: upgrade to newer than 10.5. Exact commands for each OS are on this page.
Is CVE-2018-6317 being exploited?
CVE-2018-6317 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2018-6317 affect?
CVE-2018-6317 affects claymore dual miner. Severity is critical (CVSS 9.1). The remote management interface in Claymore Dual Miner 10.5 and earlier is vulnerable to an unauthenticated format string vulnerability, allowing remote attackers to read memory or cause a denial of service.
How urgent is CVE-2018-6317?
Priority 67/100. Critical severity; EPSS top 1%: very likely to be exploited; Public exploit reference; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2018-1000049 HIGH 7.5 UPGRADE Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing
- CVE-2017-16930 CRITICAL 9.8 DOWNGRADE The remote management interface on the Claymore Dual GPU miner 10.1 allows an unauthenticated remote attacker
- CVE-2017-16929 HIGH 8.1 DOWNGRADE The remote management interface on the Claymore Dual GPU miner 10.1 is vulnerable to an authenticated director