VULNERABILITY INTELLIGENCE

CVE-2018-18665

CVSS score7.5 HIGH
EPSS probability1.46%
CISA KEVNot currently listed
Published2018-12-28
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Description

The mintToken function of Nexxus (NXX) aka NexxusToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

Weakness classification

  • CWE-190: Integer Overflow or Wraparound

Primary references