VulnerabilityModified
CVE-2018-11329
The DrugDealer function of a smart contract implementation for Ether Cartel, an Ethereum game, allows attackers to take over the contract's ownership, aka ceoAnyone.
HIGH 7.5EPSS 0.88%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.88%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The DrugDealer function of a smart contract implementation for Ether Cartel, an Ethereum game, allows attackers to take over the contract's ownership, aka ceoAnyone. After that, all the digital assets (including Ether balance and tokens) might be manipulated by the attackers, as exploited in the wild in May 2018.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- EPSS
- 0.88% probability · 57th percentile
- CISA KEV
- Not listed
- Affected
- ethercartel/ether cartel
- Source
- cve@mitre.org
References
- https://peckshield.com/2018/05/21/ceoAnyone/Technical Description, Third Party Advisory
- https://peckshield.com/2018/05/21/ceoAnyone/Technical Description, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.