Lucene search

MitreCVE-2018-19832

HistoryDec 31, 2019 - 4:15 p.m.

CVE-2018-19832

2019-12-3116:15:11

CWE-287

mitre

web.nvd.nist.gov

ethereum

erc20

smart contract

security

vulnerability

nvd

cve-2018-19832

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

35.2%

JSON

The NETM() function of a smart contract implementation for NewIntelTechMedia (NETM), an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function does not check the caller’s identity.

Affected configurations

Nvd

Node

newinteltechmedia_projectnewinteltechmediaMatch-

VendorProductVersionCPE
newinteltechmedia_projectnewinteltechmedia-cpe:2.3:a:newinteltechmedia_project:newinteltechmedia:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
newinteltechmedia_project	newinteltechmedia	-	cpe:2.3:a:newinteltechmedia_project:newinteltechmedia:-:::::::*

References

github.com/SmartContractResearcher/SmartContractSecurity/blob/master/New%20Vulnerabilities%20Allow%20Anyone%20to%20Own%20Certain%20ERC20-Based%20Smart%20Contracts%28CVE-2018-19830%2C%20CVE-2018-19831%2C%20CVE-2018-19832%2C%20CVE-2018-19833%2C%20CVE-2018-19834%29/README.md

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

35.2%

JSON

Related for CVE-2018-19832