CVE-2022-24657: Goldshell Miner Firmware

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Goldshell ASIC Miners v2.1.x was discovered to contain hardcoded credentials which allow attackers to remotely connect via the SSH protocol (port 22).

Affected products

• Goldshell Goldshell Miner Firmware: from 2.0.0, up to and including 2.2.1

Published 2022-07-20. Last modified 2026-06-17.