CVE-2020-11014 - CVE House
Back to Database
Status published Medium CVE-2020-11014

BIP LI01 output reordering may cause malformed SLP MINT transactions in Electron-Cash-SLP

Vulnerability Description

Electron-Cash-SLP before version 3.6.2 has a vulnerability. All token creators that use the "Mint Tool" feature of the Electron Cash SLP Edition are at risk of sending the minting authority baton to the wrong SLP address. Sending the mint baton to the wrong address will give another party the ability to issue new tokens or permanently destroy future minting capability. This is fixed version 3.6.2.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-11014

Credits & Attribution

No credits recorded in the NVD database.

References

More from simpleledger

View All →
CVE-2020-15131
False-positive validity for NFT1 genesis transactions in SLP Validate
High 7.5
CVE-2020-15130
False-positive validity for NFT1 genesis transactions in SLPJS
High 7.5
CVE-2020-11072
False-negative validation results in MINT transactions with invalid baton
High 8.6
CVE-2020-11071
False-negative validation results in MINT transactions with invalid baton
High 8.6
CVE-2019-16762
Validator parsing discrepancy due to string encoding in NPM slpjs
Medium 5.7

Affected Vendor

simpleledger

View all reports →

Affected Software

Electron-Cash-SLP
Vulnerable Versions:
< 3.6.2

Timeline

Official Publish: April 28th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.