Vulnerability in Ethercartel Ether Cartel

CVE-2018-11329

The DrugDealer function of a smart contract implementation for Ether Cartel, an Ethereum game, allows attackers to take over the contract's ownership, aka ceoAnyone. After that, all the digital assets (including Ether balance and tokens) might be manipulated by the attackers, as exploited in the wild in May 2018.

EPSS: 0.009 (55.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

References

  • cve@mitre.org (Technical Description, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2018-11329?
CVE-2018-11329 is a high-severity vulnerability in Ethercartel Ether Cartel. CVSS score: 7.5/10. Published 2018-05-22.
How severe is CVE-2018-11329?
High severity. CVSS v3 base score is 7.5 out of 10.