VULNERABILITY INTELLIGENCE

CVE-2018-13664

CVSS score7.5 HIGH
EPSS probability1.09%
CISA KEVNot currently listed
Published2018-07-09
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Description

The mintToken function of a smart contract implementation for CWS, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

Weakness classification

  • nvd@nist.gov: CWE-190

Primary references