PT-2022-22928 · Unknown · Evoh Nft Evohclaimable Contract

Machercs · Published 2022-09-21 · Updated 2025-05-28 · CVE-2022-35621

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Evoh NFT EvohClaimable contract (affected versions not specified)

Description The issue is related to an access control vulnerability in the Evoh NFT EvohClaimable contract. This vulnerability allows remote attackers to execute fraudulent NFT transfers. The contract is identified by a sha256 hash code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2022-35621

Affected Products

Evoh Nft Evohclaimable Contract

References · 4

• 🔥 https://github.com/MacherCS/CVE_Evoh_Contract · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-35621 · Security Note
• https://t.me/cibsecurity/50229 · Telegram Post
• https://t.me/cvenotify/123846 · Telegram Post