CVE-2017-15300: Ewbf Cuda Zcash Miner

Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days.

The miner statistics HTTP API in EWBF Cuda Zcash Miner Version 0.3.4b hangs on incoming TCP connections until some sort of request is made (such as "GET / HTTP/1.1"), which allows for a Denial of Service attack preventing a user from viewing their mining statistics by an attacker opening a session with telnet or netcat and connecting to the miner on the HTTP API port.

Affected products

• Ewbf Cuda Zcash Miner: version 0.3.4b only

Published 2017-10-15. Last modified 2026-06-17.