Vulnerabilities > Icon

DATE CVE VULNERABILITY TITLE RISK
2019-06-28 CVE-2019-12997 OS Command Injection vulnerability in Icon Loopchain
In Loopchain through 2.2.1.3, an attacker can escalate privileges from a low-privilege shell by changing the environment (aka injection in the DEFAULT_SCORE_HOST environment variable).
network
low complexity
icon CWE-78
critical
9.0