CVE-2018-10769
High
Description
The transferProxy and approveProxy functions of a smart contract implementation for SmartMesh (SMT), an Ethereum ERC20 token, allow attackers to accomplish an unauthorized transfer of digital assets because replay attacks can occur with the same-named functions (with the same signatures) in other tokens: First (FST), GG Token (GG), M2C Mesh Network (MTC), M2C Mesh Network (mesh), and UG Token (UGT).
SeverityHigh
CVSS7.5
Exploit probability—
ProductSmartmesh
PublishedAug 10, 2018
First seenAug 10, 2018
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| smartmesh_project smartmesh | No range specified | — |
| ugtoken_project ugtoken | No range specified | — |
| gg_token_project gg_token | No range specified | — |
| first_project first | No range specified | — |
| mtc_project mtc | No range specified | — |
| mesh_project mesh | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.