← Back

CVE-2018-10769

nvd nist
Published: Aug 10, 2018Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

The transferProxy and approveProxy functions of a smart contract implementation for SmartMesh (SMT), an Ethereum ERC20 token, allow attackers to accomplish an unauthorized transfer of digital assets because replay attacks can occur with the same-named functions (with the same signatures) in other tokens: First (FST), GG Token (GG), M2C Mesh Network (MTC), M2C Mesh Network (mesh), and UG Token (UGT).

Affected (6)

Show all products
Smartmesh Project: Smartmesh · Ugtoken Project: Ugtoken · Gg Token Project: Gg Token · First Project: First · Mtc Project: Mtc · Mesh Project: Mesh
Smartmesh Project
1 product
Smartmesh
Ugtoken Project
1 product
Ugtoken
Gg Token Project
1 product
Gg Token
First Project
1 product
First
Mtc Project
1 product
Mtc
Mesh Project
1 product
Mesh
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Smartmesh
All versions
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Ugtoken
All versions
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Gg Token
All versions
Configuration D
1 vulnerable
Vulnerable SoftwareAffected Versions
First
All versions
Configuration E
1 vulnerable
Vulnerable SoftwareAffected Versions
Mtc
All versions
Configuration F
1 vulnerable
Vulnerable SoftwareAffected Versions
Mesh
All versions

References (4)

Source: cve@mitre.org
ExploitThird Party Advisory
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.