CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-6353

The Python console in Electrum through 2.9.4 and 3.x through 3.0.5 supports arbitrary Python code without considering (1) social-engineering attacks in which a user pastes code that they do not understand and (2) code pasted by a physically proximate attacker at an unattended workstation, which makes it easier for attackers to steal Bitcoin via hook code that runs at a later time when the wallet password has been entered, a different vulnerability than CVE-2018-1000022.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 29.6%

CVSS Severity

CVSS v3 Score 7.8

CVSS v2 Score 7.2

References

Products affected by CVE-2018-6353

Electrum » Electrum » Version: 0.56

cpe:2.3:a:electrum:electrum:0.56
Electrum » Electrum » Version: 0.57

cpe:2.3:a:electrum:electrum:0.57
Electrum » Electrum » Version: 0.58

cpe:2.3:a:electrum:electrum:0.58
Electrum » Electrum » Version: 0.59

cpe:2.3:a:electrum:electrum:0.59
Electrum » Electrum » Version: 0.60

cpe:2.3:a:electrum:electrum:0.60
Electrum » Electrum » Version: 1.1

cpe:2.3:a:electrum:electrum:1.1
Electrum » Electrum » Version: 1.2

cpe:2.3:a:electrum:electrum:1.2
Electrum » Electrum » Version: 1.3

cpe:2.3:a:electrum:electrum:1.3
Electrum » Electrum » Version: 1.5

cpe:2.3:a:electrum:electrum:1.5
Electrum » Electrum » Version: 1.5.1

cpe:2.3:a:electrum:electrum:1.5.1
Electrum » Electrum » Version: 1.5.2

cpe:2.3:a:electrum:electrum:1.5.2
Electrum » Electrum » Version: 1.5.3

cpe:2.3:a:electrum:electrum:1.5.3
Electrum » Electrum » Version: 1.5.4

cpe:2.3:a:electrum:electrum:1.5.4
Electrum » Electrum » Version: 1.5.5

cpe:2.3:a:electrum:electrum:1.5.5
Electrum » Electrum » Version: 1.5.6

cpe:2.3:a:electrum:electrum:1.5.6
Electrum » Electrum » Version: 1.5.7

cpe:2.3:a:electrum:electrum:1.5.7
Electrum » Electrum » Version: 1.5.8

cpe:2.3:a:electrum:electrum:1.5.8
Electrum » Electrum » Version: 1.6.0

cpe:2.3:a:electrum:electrum:1.6.0
Electrum » Electrum » Version: 1.6.1

cpe:2.3:a:electrum:electrum:1.6.1
Electrum » Electrum » Version: 1.6.2

cpe:2.3:a:electrum:electrum:1.6.2
Electrum » Electrum » Version: 1.7

cpe:2.3:a:electrum:electrum:1.7
Electrum » Electrum » Version: 1.7.1

cpe:2.3:a:electrum:electrum:1.7.1
Electrum » Electrum » Version: 1.7.2

cpe:2.3:a:electrum:electrum:1.7.2
Electrum » Electrum » Version: 1.7.3

cpe:2.3:a:electrum:electrum:1.7.3
Electrum » Electrum » Version: 1.7.4

cpe:2.3:a:electrum:electrum:1.7.4
Electrum » Electrum » Version: 1.8

cpe:2.3:a:electrum:electrum:1.8
Electrum » Electrum » Version: 1.8.1

cpe:2.3:a:electrum:electrum:1.8.1
Electrum » Electrum » Version: 1.9

cpe:2.3:a:electrum:electrum:1.9
Electrum » Electrum » Version: 1.9.1

cpe:2.3:a:electrum:electrum:1.9.1
Electrum » Electrum » Version: 1.9.2

cpe:2.3:a:electrum:electrum:1.9.2
Electrum » Electrum » Version: 1.9.3

cpe:2.3:a:electrum:electrum:1.9.3
Electrum » Electrum » Version: 1.9.4

cpe:2.3:a:electrum:electrum:1.9.4
Electrum » Electrum » Version: 1.9.5

cpe:2.3:a:electrum:electrum:1.9.5
Electrum » Electrum » Version: 1.9.6

cpe:2.3:a:electrum:electrum:1.9.6
Electrum » Electrum » Version: 1.9.7

cpe:2.3:a:electrum:electrum:1.9.7
Electrum » Electrum » Version: 1.9.8

cpe:2.3:a:electrum:electrum:1.9.8
Electrum » Electrum » Version: 2.0

cpe:2.3:a:electrum:electrum:2.0
Electrum » Electrum » Version: 2.0.1

cpe:2.3:a:electrum:electrum:2.0.1
Electrum » Electrum » Version: 2.0.2

cpe:2.3:a:electrum:electrum:2.0.2
Electrum » Electrum » Version: 2.0.3

cpe:2.3:a:electrum:electrum:2.0.3
Electrum » Electrum » Version: 2.0.4

cpe:2.3:a:electrum:electrum:2.0.4
Electrum » Electrum » Version: 2.1

cpe:2.3:a:electrum:electrum:2.1
Electrum » Electrum » Version: 2.1.1

cpe:2.3:a:electrum:electrum:2.1.1
Electrum » Electrum » Version: 2.2

cpe:2.3:a:electrum:electrum:2.2
Electrum » Electrum » Version: 2.3

cpe:2.3:a:electrum:electrum:2.3
Electrum » Electrum » Version: 2.3.1

cpe:2.3:a:electrum:electrum:2.3.1
Electrum » Electrum » Version: 2.3.2

cpe:2.3:a:electrum:electrum:2.3.2
Electrum » Electrum » Version: 2.3.3

cpe:2.3:a:electrum:electrum:2.3.3
Electrum » Electrum » Version: 2.4

cpe:2.3:a:electrum:electrum:2.4
Electrum » Electrum » Version: 2.4.1

cpe:2.3:a:electrum:electrum:2.4.1
Electrum » Electrum » Version: 2.4.2

cpe:2.3:a:electrum:electrum:2.4.2
Electrum » Electrum » Version: 2.4.3

cpe:2.3:a:electrum:electrum:2.4.3
Electrum » Electrum » Version: 2.5

cpe:2.3:a:electrum:electrum:2.5
Electrum » Electrum » Version: 2.5.1

cpe:2.3:a:electrum:electrum:2.5.1
Electrum » Electrum » Version: 2.5.2

cpe:2.3:a:electrum:electrum:2.5.2
Electrum » Electrum » Version: 2.5.3

cpe:2.3:a:electrum:electrum:2.5.3
Electrum » Electrum » Version: 2.5.4

cpe:2.3:a:electrum:electrum:2.5.4
Electrum » Electrum » Version: 2.6

cpe:2.3:a:electrum:electrum:2.6
Electrum » Electrum » Version: 2.6.1

cpe:2.3:a:electrum:electrum:2.6.1
Electrum » Electrum » Version: 2.6.2

cpe:2.3:a:electrum:electrum:2.6.2
Electrum » Electrum » Version: 2.6.3

cpe:2.3:a:electrum:electrum:2.6.3
Electrum » Electrum » Version: 2.6.4

cpe:2.3:a:electrum:electrum:2.6.4
Electrum » Electrum » Version: 2.7.0

cpe:2.3:a:electrum:electrum:2.7.0
Electrum » Electrum » Version: 2.7.1

cpe:2.3:a:electrum:electrum:2.7.1
Electrum » Electrum » Version: 2.7.10

cpe:2.3:a:electrum:electrum:2.7.10
Electrum » Electrum » Version: 2.7.11

cpe:2.3:a:electrum:electrum:2.7.11
Electrum » Electrum » Version: 2.7.12

cpe:2.3:a:electrum:electrum:2.7.12
Electrum » Electrum » Version: 2.7.13

cpe:2.3:a:electrum:electrum:2.7.13
Electrum » Electrum » Version: 2.7.14

cpe:2.3:a:electrum:electrum:2.7.14
Electrum » Electrum » Version: 2.7.15

cpe:2.3:a:electrum:electrum:2.7.15
Electrum » Electrum » Version: 2.7.16

cpe:2.3:a:electrum:electrum:2.7.16
Electrum » Electrum » Version: 2.7.17

cpe:2.3:a:electrum:electrum:2.7.17
Electrum » Electrum » Version: 2.7.18

cpe:2.3:a:electrum:electrum:2.7.18
Electrum » Electrum » Version: 2.7.2

cpe:2.3:a:electrum:electrum:2.7.2
Electrum » Electrum » Version: 2.7.3

cpe:2.3:a:electrum:electrum:2.7.3
Electrum » Electrum » Version: 2.7.4

cpe:2.3:a:electrum:electrum:2.7.4
Electrum » Electrum » Version: 2.7.5

cpe:2.3:a:electrum:electrum:2.7.5
Electrum » Electrum » Version: 2.7.6

cpe:2.3:a:electrum:electrum:2.7.6
Electrum » Electrum » Version: 2.7.7

cpe:2.3:a:electrum:electrum:2.7.7
Electrum » Electrum » Version: 2.7.8

cpe:2.3:a:electrum:electrum:2.7.8
Electrum » Electrum » Version: 2.7.9

cpe:2.3:a:electrum:electrum:2.7.9
Electrum » Electrum » Version: 2.8.0

cpe:2.3:a:electrum:electrum:2.8.0
Electrum » Electrum » Version: 2.8.1

cpe:2.3:a:electrum:electrum:2.8.1
Electrum » Electrum » Version: 2.8.2

cpe:2.3:a:electrum:electrum:2.8.2
Electrum » Electrum » Version: 2.8.3

cpe:2.3:a:electrum:electrum:2.8.3
Electrum » Electrum » Version: 2.9.0

cpe:2.3:a:electrum:electrum:2.9.0
Electrum » Electrum » Version: 2.9.1

cpe:2.3:a:electrum:electrum:2.9.1
Electrum » Electrum » Version: 2.9.2

cpe:2.3:a:electrum:electrum:2.9.2
Electrum » Electrum » Version: 2.9.3

cpe:2.3:a:electrum:electrum:2.9.3
Electrum » Electrum » Version: 2.9.4

cpe:2.3:a:electrum:electrum:2.9.4
Electrum » Electrum » Version: 3.0.0

cpe:2.3:a:electrum:electrum:3.0.0
Electrum » Electrum » Version: 3.0.1

cpe:2.3:a:electrum:electrum:3.0.1
Electrum » Electrum » Version: 3.0.2

cpe:2.3:a:electrum:electrum:3.0.2
Electrum » Electrum » Version: 3.0.3

cpe:2.3:a:electrum:electrum:3.0.3
Electrum » Electrum » Version: 3.0.5

cpe:2.3:a:electrum:electrum:3.0.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-6353

Products

Pricing

Contact Us