CVE-2024-51424

CRITICAL

An issue in the PepeGxng smart contract (which can be run on the Ethereum blockchain) allows remote attackers to have an unspecified impact via the Owned.setOwner function. NOTE: this is disputed b...

Affects 1 product across 1 vendor.

CVSS 3.19.8
EPSS0.6%
Percentile50th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-94: Code Injection

Attacker injects arbitrary code that is executed by the application process.

Related Attack Patterns (CAPEC)
CAPEC-35 Leverage Executable Code in Non-Executable Files
via CWE-94
CAPEC-77 Manipulating User-Controlled Variables
via CWE-94
CAPEC-242 Code Injection
via CWE-94

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

A vulnerability in the PepeGxng smart contract on the Ethereum blockchain allows remote attackers to potentially manipulate the contract via the Owned.setOwner function, though the impact is disputed.

BSID: BS-2024-GLOBAL-046038-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2024-51424?
A vulnerability in the PepeGxng smart contract on the Ethereum blockchain allows remote attackers to potentially manipulate the contract via the Owned.setOwner function, though the impact is disputed.
What is the CVSS score for CVE-2024-51424?
CVE-2024-51424 has CVSS 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS: 0.6%.
Is CVE-2024-51424 actively exploited?
No confirmed active exploitation of CVE-2024-51424 as of 2026-09-25.
How do I remediate CVE-2024-51424?
Priority: HIGH.
What systems are affected by CVE-2024-51424?
CVE-2024-51424 affects Ethereum Ethereum.
Vulnerability Details
CVE IDCVE-2024-51424
BSIDBS-2024-GLOBAL-046038-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published2024-10-30
Last Modified2026-06-17
ICS Relevance15%
Weakness (CWE)
Code Injection
SourceNVD
Official Description

An issue in the PepeGxng smart contract (which can be run on the Ethereum blockchain) allows remote attackers to have an unspecified impact via the Owned.setOwner function. NOTE: this is disputed by third parties because the impact is limited to function calls.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The attack vector involves exploiting the Owned.setOwner function in the PepeGxng smart contract, which could allow unauthorized modification of the contract's ownership.

Exploitation Likelihood: MEDIUM

Affected Products
VendorProductAffected Versions
Ethereum Ethereum 1.12.2
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 715 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hashd6a582ad68de8e3c018f8af0b6ec931d8fadda481b125a1272281fb19f5e6a3ff64c53988f0c93563a5ea093faa5bd6c4479e6e7c70020194ee7dba1b1c2586e
Related CVEs affecting Ethereum
CVE-2017-14451 10.0 An exploitable out-of-bounds read vulnerability exists in libevm (Ethereum Vi... CVE-2024-51427 9.8 An issue in the PepeGxng smart contract (which can be run on the Ethereum blo... CVE-2018-15890 9.8 An issue was discovered in EthereumJ 1.8.2. There is Unsafe Deserialization i... CVE-2018-18920 8.8 Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.execute_bytecode call th... CVE-2024-51425 8.8 An issue in the WaterToken smart contract (which can be run on the Ethereum b...
View all Ethereum CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.8 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →