Vulnerability CVE-2021-34273


Published: 2021-08-03   Modified: 2021-08-04

Description:
A security flaw in the 'owned' function of a smart contract implementation for BTC2X (B2X), a tradeable Ethereum ERC20 token, allows attackers to hijack victim accounts and arbitrarily increase the digital supply of assets.

Type:

CWE-863

(Incorrect Authorization)

CVSS2 => (AV:N/AC:L/Au:N/C:N/I:P/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
None
Partial
None
Affected software
B2x project -> B2X 

 References:
https://github.com/MRdoulestar/SC-RCVD/blob/main/Vulnerabilities/BTC2X.md

Copyright 2024, cxsecurity.com

 

Back to Top