CVE-2018-19831 is a critical vulnerability affecting the Cryptbond Network (CBN) ERC20 token smart contract. An attacker can exploit the ToOwner() function, which lacks caller identity verification, to arbitrarily change the contract's owner. This high-severity flaw (CVSS 7.5) allows for unauthorized modification of the contract's ownership without requiring authentication or user interaction. While no public exploits, Metasploit modules, or Nuclei templates are currently available, and there is no evidence of active exploitation or significant community discussion, the potential impact on integrity is substantial.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:cryptbond_network_project:cryptbond_network:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.