CyberSec.Space Logo
Back to CVE Browser

CVE-2018-13070

HIGH
7.5
CVSS Severity Score
EPSS Score0.1440%
EPSS Percentile23.28th
PublishedJul 3, 2018
Last ModifiedNov 21, 2024

Vulnerability Description

The mintToken function of a smart contract implementation for EncryptedToken (ECC), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

Affected Platforms (CPE)

📦
Encryptedtoken Project

Encryptedtoken

All versions

References & Advisories

🔗 https://github.com/VenusADLab/EtherTokens/blob/master/EncryptedToken/EncryptedToken.md
🔗 https://github.com/VenusADLab/EtherTokens/blob/master/EncryptedToken/EncryptedToken.md

Related Vulnerabilities

CVE-2018-377410.0

Incorrect parsing in url-parse <1.4.3 returns wrong hostname which leads to multiple vulnerabilities such as SSRF, Open Redirect, ...

CVE-2018-100065110.0

Stroom version <5.4.5 contains a XML External Entity (XXE) vulnerability in XML Parser that can result in disclosure of confidenti...

CVE-2018-1246410.0

A SQL injection vulnerability in the web administration and quarantine components of Micro Focus Secure Messaging Gateway allows a...

CVE-2018-669210.0

Stack-based Buffer Overflow vulnerability in libUPnPHndlr.so in Belkin Wemo Insight Smart Plug allows remote attackers to bypass l...