PT-2024-13404 · Rptc · Rptc

Published 2024-01-19 · Updated 2025-05-30 · CVE-2023-47035

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions RPTC version 0x3b08c

Description The issue is related to the lack of status checks on the tradingOpen parameter, which can be exploited by attackers to conduct unauthorized transfer operations.

Recommendations For RPTC version 0x3b08c, consider restricting access to the tradingOpen parameter to prevent unauthorized transfer operations until a fix is available. As a temporary workaround, avoid using the tradingOpen parameter in sensitive transactions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-47035

Affected Products

Rptc

References · 6

• 🔥 https://github.com/RikkaLzw/CVE/blob/main/CVE-2024.1.19-3.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-47035 · Security Note
• https://etherscan.io/token/0x3b08c03fa8278cf81b9043b228183760376fcdbb · Note
• https://t.me/cvenotify/124159 · Telegram Post
• https://twitter.com/CVEnew/status/1748439348683378688 · Twitter Post
• https://t.me/cvenotify/69206 · Telegram Post