CVE-2020-17753 Business logic in n/a
Attackers can exploit a logic flaw in the RC token smart contract to transfer arbitrary token amounts to any address.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2020-17753?
CVE-2020-17753 is a medium-severity vulnerability in n/a, published on 24 Jun 2021. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
An issue was discovered in function addMeByRC in the smart contract implementation for RC, an Ethereum token, allows attackers to transfer an arbitrary amount of tokens to an arbitrary address.
Which versions are affected by CVE-2020-17753?
It affects 2 products.
Products include Rc Project Rc, Rcpro Project Rcpro.
How do I fix CVE-2020-17753?
No fix has been published for CVE-2020-17753 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-17753 being exploited?
There is no known exploitation of CVE-2020-17753 in the wild and no public exploit code.
Sources
Also known as GHSA-hmfj-m422-4q96.