CVE-2024-51427

CRITICAL

An issue in the PepeGxng smart contract (which can be run on the Ethereum blockchain) allows remote attackers to have an unspecified impact via the mint function. NOTE: this is disputed by third pa...

Affects 1 product across 1 vendor.

CVSS 3.19.8
EPSS0.6%
Percentile50th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-94: Code Injection

Attacker injects arbitrary code that is executed by the application process.

Related Attack Patterns (CAPEC)
CAPEC-35 Leverage Executable Code in Non-Executable Files
via CWE-94
CAPEC-77 Manipulating User-Controlled Variables
via CWE-94
CAPEC-242 Code Injection
via CWE-94

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

A vulnerability in the PepeGxng smart contract on the Ethereum blockchain may allow remote attackers to exploit the mint function, though the impact is disputed by third parties.

BSID: BS-2024-GLOBAL-219366-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2024-51427?
A vulnerability in the PepeGxng smart contract on the Ethereum blockchain may allow remote attackers to exploit the mint function, though the impact is disputed by third parties.
What is the CVSS score for CVE-2024-51427?
CVE-2024-51427 has CVSS 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS: 0.6%.
Is CVE-2024-51427 actively exploited?
No confirmed active exploitation of CVE-2024-51427 as of 2026-09-25.
How do I remediate CVE-2024-51427?
Priority: MEDIUM.
What systems are affected by CVE-2024-51427?
CVE-2024-51427 affects Ethereum Ethereum.
Vulnerability Details
CVE IDCVE-2024-51427
BSIDBS-2024-GLOBAL-219366-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published2024-10-30
Last Modified2026-06-17
ICS Relevance15%
Weakness (CWE)
Code Injection
SourceNVD
Official Description

An issue in the PepeGxng smart contract (which can be run on the Ethereum blockchain) allows remote attackers to have an unspecified impact via the mint function. NOTE: this is disputed by third parties because the impact is limited to function calls.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The attack vector involves remote attackers interacting with the mint function of the PepeGxng smart contract. The exact nature of the impact is unclear and disputed, but it is believed to involve unauthorized function calls.

Exploitation Likelihood: MEDIUM

Affected Products
VendorProductAffected Versions
Ethereum Ethereum 1.12.2
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 715 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hashb0e8842204a6b89c5f02d3769e512d4fd509e8c7fdb19bbe9e2ba97d7120166105c67a13609290a7c603f0105da4cbca4b23f08818494a655e9bfb5290489f3e
Related CVEs affecting Ethereum
CVE-2017-14451 10.0 An exploitable out-of-bounds read vulnerability exists in libevm (Ethereum Vi... CVE-2024-51424 9.8 An issue in the PepeGxng smart contract (which can be run on the Ethereum blo... CVE-2018-15890 9.8 An issue was discovered in EthereumJ 1.8.2. There is Unsafe Deserialization i... CVE-2018-18920 8.8 Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.execute_bytecode call th... CVE-2024-51425 8.8 An issue in the WaterToken smart contract (which can be run on the Ethereum b...
View all Ethereum CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.8 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →