high7.5
CVE-2022-36604
An access control issue in Canaan Avalon ASIC Miner 2020.3.30 and below allows unauthenticated attackers to arbitrarily change user passwords via a crafted POS…
Impact
An access control issue in Canaan Avalon ASIC Miner 2020.3.30 and below allows unauthenticated attackers to arbitrarily change user passwords via a crafted POST request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Canaan | Avalon Asic Miner Firmware | through 2020.3.30 |