CVE-2024-51425

HIGH

An issue in the WaterToken smart contract (which can be run on the Ethereum blockchain) allows remote attackers to have an unspecified impact. NOTE: this is disputed by third parties because the im...

Affects 1 product across 1 vendor.

CVSS 3.18.8
EPSS0.4%
Percentile37th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, low privileges required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-863: Incorrect Authorization

Software performs an authorization check incorrectly, allowing access beyond intended privileges.

◆ AI Analysis — automated analysis, not human-reviewed

A vulnerability in the WaterToken smart contract on the Ethereum blockchain may allow remote attackers to execute unspecified function calls, though this claim is disputed by third parties.

BSID: BS-2024-GLOBAL-046037-H • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2024-51425?
A vulnerability in the WaterToken smart contract on the Ethereum blockchain may allow remote attackers to execute unspecified function calls, though this claim is disputed by third parties.
What is the CVSS score for CVE-2024-51425?
CVE-2024-51425 has CVSS 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS: 0.4%.
Is CVE-2024-51425 actively exploited?
No confirmed active exploitation of CVE-2024-51425 as of 2026-09-25.
How do I remediate CVE-2024-51425?
Priority: MEDIUM.
What systems are affected by CVE-2024-51425?
CVE-2024-51425 affects Ethereum Ethereum.
Vulnerability Details
CVE IDCVE-2024-51425
BSIDBS-2024-GLOBAL-046037-H BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published2024-10-30
Last Modified2026-06-17
ICS Relevance15%
Weakness (CWE)
Incorrect Authorization
SourceNVD
Official Description

An issue in the WaterToken smart contract (which can be run on the Ethereum blockchain) allows remote attackers to have an unspecified impact. NOTE: this is disputed by third parties because the impact is limited to function calls.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The attack vector involves remote attackers exploiting a flaw in the WaterToken smart contract to potentially execute arbitrary function calls. However, the extent of the impact is disputed and may be limited to specific functions.

Exploitation Likelihood: MEDIUM

Affected Products
VendorProductAffected Versions
Ethereum Ethereum 1.12.2
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 715 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hash02fd36a5d529fbb1fcae30ed2e10b8657b316f3a7a9904f5687cc0540d868c629e59af758a1ab55f69c8b194d727b5f6a649a28e8ddeb79c08d6241fcd9f5e66
Related CVEs affecting Ethereum
CVE-2017-14451 10.0 An exploitable out-of-bounds read vulnerability exists in libevm (Ethereum Vi... CVE-2024-51424 9.8 An issue in the PepeGxng smart contract (which can be run on the Ethereum blo... CVE-2018-15890 9.8 An issue was discovered in EthereumJ 1.8.2. There is Unsafe Deserialization i... CVE-2024-51427 9.8 An issue in the PepeGxng smart contract (which can be run on the Ethereum blo... CVE-2018-18920 8.8 Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.execute_bytecode call th...
View all Ethereum CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →