CVE-2020-17753

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An issue was discovered in function addMeByRC in the smart contract implementation for RC, an Ethereum token, allows attackers to transfer an arbitrary amount of tokens to an arbitrary address.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://etherscan.io/address/0x07c1C8c2BCe6290DAA554118b7d208041615CE54Vendor Advisory
https://etherscan.io/address/0x340DbA127F099DAB9DC8599C75b16e44D9b02FdbVendor Advisory
https://etherscan.io/address/0x403E518F21F5Ce308085Dcf6637758C61f92446AVendor Advisory
https://etherscan.io/address/0x5a50C7D96fC68ea2F0bEE06D86CD971c31F85604Vendor Advisory
https://etherscan.io/address/0x86b784AEF0e9c9A581550bA07fb85B64c780c320Vendor Advisory
https://etherscan.io/address/0xD7aA007C3e7ab454FFE3E20F0b28F926Db295477Vendor Advisory
https://github.com/hellowuzekai/blockchains/blob/master/Phishing.mdExploit, Third Party Advisory
https://etherscan.io/address/0x07c1C8c2BCe6290DAA554118b7d208041615CE54Vendor Advisory
https://etherscan.io/address/0x340DbA127F099DAB9DC8599C75b16e44D9b02FdbVendor Advisory
https://etherscan.io/address/0x403E518F21F5Ce308085Dcf6637758C61f92446AVendor Advisory
https://etherscan.io/address/0x5a50C7D96fC68ea2F0bEE06D86CD971c31F85604Vendor Advisory
https://etherscan.io/address/0x86b784AEF0e9c9A581550bA07fb85B64c780c320Vendor Advisory
https://etherscan.io/address/0xD7aA007C3e7ab454FFE3E20F0b28F926Db295477Vendor Advisory
https://github.com/hellowuzekai/blockchains/blob/master/Phishing.mdExploit, Third Party Advisory

Timeline

Published: Jun 24, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-177598.8An issue was found in the Evernote client for Windows 10, 7, and 2008 in the protocol handler. This enables attackers for arbitrary command CVE-2020-17764.3When an agent user is renamed or set to invalid the session belonging to the user is keept active. The session can not be used to access tic CVE-2020-17775.3Agent names that participates in a chat conversation are revealed in certain parts of the external interface as well as in chat transcriptio CVE-2020-17784.3When OTRS uses multiple backends for user authentication (with LDAP), agents are able to login even if the account is set to invalid. This i CVE-2020-17794.9When dynamic templates are used (OTRSTicketForms), admin can use OTRS tags which are not masked properly and can reveal sensitive informatio CVE-2020-17855.5Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a denial of service vulnerability. The system does not properly check the status of c CVE-2020-17864.6HUAWEI Mate 20 Pro smartphones versions earlier than 10.0.0.175(C00E69R3P8) have an improper authentication vulnerability. The software does CVE-2020-17876.6HUAWEI Mate 20 smartphones versions earlier than 9.1.0.139(C00E133R3P1) have an improper authentication vulnerability. The system has a logi CVE-2020-17885.5Honor V30 smartphones with versions earlier than 10.0.1.135(C00E130R4P1) have an improper authentication vulnerability. Certain applications CVE-2020-17896.8Huawei OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X products with version 1.0.1.21(SP3) have an insufficient authentication vulnerability.CVE-2020-178916.1TP-Link Archer C1200 firmware version 1.13 Build 2018/01/24 rel.52299 EU has a XSS vulnerability allowing a remote attacker to execute arbit CVE-2020-17908.8GaussDB 200 with version of 6.5.1 have a command injection vulnerability. The software constructs part of a command using external input fro