CVE-2021-40903
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-40903
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in Antminer Monitor 0.50.0 exists because of backdoor or misconfiguration inside a settings file in flask server. Settings file has a predefined secret string, which would be randomly generated, however it is static.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Antminer Monitor 信任管理问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Antminer Monitor是希腊Anastasios Selalmazidis个人开发者的一种使用简单 Web 界面的加密货币 ASIC 采矿硬件监控器。 Antminer Monitor 0.50.0 版本存在信任管理问题漏洞，该漏洞源于 flask 服务器中的设置文件中存在后门或错误配置。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2021-40903
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | CVE-2021-40903 | https://github.com/vulnz/CVE-2021-40903 | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-40903
请登录查看更多情报信息。
- https://www.exploit-db.com/exploits/50267x_refsource_MISC
- https://github.com/anselal/antminer-monitorx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2021-40903
Same Patch Batch · n/a · 2022-06-17 · 38 CVEs total
| CVE-2022-25852 | 7.5 HIGH | Denial of Service (DoS) |
| CVE-2022-22138 | 7.5 HIGH | Denial of Service (DoS) |
| CVE-2022-21213 | 7.5 HIGH | Prototype Pollution |
| CVE-2022-25345 | 7.5 HIGH | Denial of Service (DoS) |
| CVE-2022-25856 | 7.5 HIGH | Directory Traversal |
| CVE-2022-33915 | 7.0 HIGH | Amazon AWS 竞争条件问题漏洞 |
| CVE-2022-25871 | 5.9 MEDIUM | Prototype Pollution |
| CVE-2022-25872 | 5.3 MEDIUM | Out-of-bounds Read |
| CVE-2019-12354 | ZZCMS SQL注入漏洞 | |
| CVE-2022-33912 | CheckMK Raw Edition 安全漏洞 | |
| CVE-2019-12355 | ZZCMS SQL注入漏洞 | |
| CVE-2019-12356 | ZZCMS SQL注入漏洞 | |
| CVE-2019-12357 | ZZCMS SQL注入漏洞 | |
| CVE-2019-12358 | ZZCMS SQL注入漏洞 | |
| CVE-2019-12359 | ZZCMS SQL注入漏洞 | |
| CVE-2021-45026 | ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 跨站脚本漏洞 | |
| CVE-2021-45025 | ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 安全漏洞 | |
| CVE-2021-45024 | ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 代码问题漏洞 | |
| CVE-2022-31784 | Mitel MiVoice Business Express 安全漏洞 | |
| CVE-2022-32276 | Grafana 授权问题漏洞 |
Showing top 20 of 38 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2021-40903
No comments yet