CVE-2018-1000049: Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abus...

Security readout for executives and security teams

This issue affects Claymore Dual Miner 7.3 and earlier when its miner API is run in read/write mode. In that configuration, a remote party may be able to execute code through the API. Business urgency depends on whether any mining systems expose this API beyond trusted hosts. Likely exposure is limited to systems running Nanopool Claymore Dual Miner version 7.3 or earlier with the miner API enabled in read/write mode, especially if reachable from untrusted networks. Prioritize if cryptocurrency mining hosts exist in the environment or third-party operations manage them. Treat exposed read/write APIs as urgent because public exploit references exist, even though active exploitation is not established in the provided sources. Mitigation focus: Disable read/write mode for the miner API where possible.; Restrict miner API access to trusted management hosts only.; Remove internet exposure for affected miner management interfaces..

Prepared

Jun 7, 2026, 20:58 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.