PT-2025-18171 · Unknown · Coresmartcontracts Uniswap

Published 2025-04-29 · Updated 2025-04-29 · CVE-2025-25962

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Coresmartcontracts Uniswap versions 3.0 through 3.0

Description The issue allows a remote attacker to escalate privileges via the modifyPosition function. This enables the attacker to gain elevated access, potentially leading to further exploitation.

Recommendations For Coresmartcontracts Uniswap version 3.0, update to version 4.0 to resolve the issue. As a temporary workaround, consider restricting access to the modifyPosition function until the update can be applied.

Exploit

Fix

LPE

Improper Access Control

Improper Privilege Management

Weakness Enumeration

CWE-284

CWE-269

Related Identifiers

CVE-2025-25962

Affected Products

Coresmartcontracts Uniswap

References · 7

• 🔥 https://github.com/CVEProject/docs/blob/gh-pages/requester/reservation-guidelines.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-25962 · Security Note
• https://twitter.com/CVEnew/status/1917245412966011336 · Twitter Post
• https://t.me/cvetracker/22624 · Telegram Post
• https://medium.com/@cnetsec/access-control-vulnerability-in-uniswap-v3-cve-2025-25962-f7cf21536978 · Note
• https://t.me/cvedetector/24026 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1917328195197563335 · Twitter Post