Vulnerability in Ethercartel Ether Cartel
CVE-2018-11329
The DrugDealer function of a smart contract implementation for Ether Cartel, an Ethereum game, allows attackers to take over the contract's ownership, aka ceoAnyone. After that, all the digital assets (including Ether balance and tokens) might be manipulated by the attackers, as exploited in the wild in May 2018.
EPSS: 0.009 (55.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.
Affected products
- Ethercartel Ether_cartel — versions 2018-05-18
- N/a — versions n/a
References
- cve@mitre.org (Technical Description, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2018-11329?
- CVE-2018-11329 is a high-severity vulnerability in Ethercartel Ether Cartel. CVSS score: 7.5/10. Published 2018-05-22.
- How severe is CVE-2018-11329?
- High severity. CVSS v3 base score is 7.5 out of 10.