Lucene search

MitreCVE-2019-15078

HistoryDec 30, 2020 - 8:15 p.m.

CVE-2019-15078

2020-12-3020:15:14

mitre

web.nvd.nist.gov

airdropx

born

smart contract

ethereum

token

vulnerability

cryptocurrency

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

42.0%

JSON

An issue was discovered in a smart contract implementation for AIRDROPX BORN through 2019-05-29, an Ethereum token. The name of the constructor has a typo (wrong case: XBornID versus XBORNID) that allows an attacker to change the owner of the contract and obtain cryptocurrency for free.

Affected configurations

Nvd

Node

xbornidxbornidRange≤2019-05-29

VendorProductVersionCPE
xbornidxbornid*cpe:2.3:a:xbornid:xbornid:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
xbornid	xbornid	*	cpe:2.3:a:xbornid:xbornid::::::::

References

github.com/smsecgroup/SM-VUL/tree/master/typo-vul-00

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

42.0%

JSON

Related for CVE-2019-15078