CVE-2022-48216

2023-01-0416:15:08

CWE-667

[email protected]

web.nvd.nist.gov

uniswap

universal router

reentrancy

theft of funds

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.003

Percentile

68.6%

JSON

Uniswap Universal Router before 1.1.0 mishandles reentrancy. This would have allowed theft of funds.

Affected configurations

Nvd

Node

uniswapuniversal_router_firmwareRange<1.1.0

AND

uniswapuniversal_routerMatch-

VendorProductVersionCPE
uniswapuniversal_router_firmware*cpe:2.3:o:uniswap:universal_router_firmware:*:*:*:*:*:*:*:*
uniswapuniversal_router-cpe:2.3:h:uniswap:universal_router:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
uniswap	universal_router_firmware	*	cpe:2.3:o:uniswap:universal_router_firmware::::::::
uniswap	universal_router	-	cpe:2.3:h:uniswap:universal_router:-:::::::*