TI-2017-08906 Aliases CVE-2017-12113 GHSA-wqgg-wcjm-mhc9

Incorrect authorization in Talos CPP-Ethereum

LOW 38CWE-863Published 2018-01-19 · Updated 2024-09-16

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: High
Impact type: Security bypass
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-863.

Summary

An exploitable improper authorization vulnerability exists in admin_nodeInfo API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the restricted functionality resulting in authorization bypass. An attacker can send JSON to trigger this vulnerability.

Why it matters now

EPSS 0.01485 74th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Talos	CPP-Ethereum	Ethereum commit 4e1015743b95821849d001618a7ce82c7c073768	—	No fix listed	CNA

CPP-Ethereum VendorTalos Affected Ethereum commit 4e1015743b95821849d001618a7ce82c7c073768 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:ethereum:cpp-ethereum:-:::::::*	not specified by NVD	Vulnerable	ethereum

cpe:2.3:a:ethereum:cpp-ethereum:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·ethereum

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2017-12113
2026-10-03 Alias added: GHSA-wqgg-wcjm-mhc9

References

Exploit 1

https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0465

TI-2017-08911 Incorrect authorization in Talos CPP-Ethereum CVSS 3.1HIGH 8.1
TI-2017-08910 Incorrect authorization in Talos CPP-Ethereum CVSS 3.1HIGH 8.1
TI-2017-08908 Incorrect authorization in Talos CPP-Ethereum CVSS 3.1HIGH 8.1
TI-2017-08905 Incorrect authorization in Talos CPP-Ethereum CVSS 3.1HIGH 8.1
TI-2017-08912 Improper check for unusual conditions in Talos CPP-Ethereum CVSS 3.1HIGH 7.5
TI-2017-08907 Incorrect authorization in Talos CPP-Ethereum CVSS 3.1MEDIUM 6.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences