← Database

CVE-2025-27579

MEDIUM CVSS: 5.4 Published: 2025-03-03 Modified: 2026-06-17

Description

In Bitaxe ESP-Miner before 2.5.0 with AxeOS, one can use an /api/system CSRF attack to update the payout address (aka stratumUser) for a Bitaxe Bitcoin miner, or change the frequency and voltage settings.

Affected Platforms

Unknown

Weakness Type

CWE-352

References