Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2020-20178

24
FAUCET Score

CVE-2020-20178 is a denial-of-service vulnerability affecting the payout function in the latest version of Ethereum 0xe933c0cd9784414d5f278c114904f5a84b396919#code.sol. Attackers can trigger an exception by creating an excessively long array of account addresses, leading to a denial of service. With a CVSS score of 7.5 (HIGH), this vulnerability is remotely exploitable with low attack complexity, resulting in a high impact on availability. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
Range not provided by sourceCPE matchmatch criteria
cpe:2.3:a:whohas_project:whohas:-:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.5HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
1.09%
Probability of exploitation in next 30 days
EPSS Percentile
62.1%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
This CVE's current EPSS score of 0.0109 is in the 39th percentile among its peer group of 51,455 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

microsoftpatch availablevia msrc
Product: 19052-16820Fixed in: 2.9.18-1
microsoftpatch availablevia msrc
Product: cm1 ansible 2.9.18-1 on CBL Mariner 1.0Fixed in: 2.9.18-1

Vendor Advisories (1)

microsoft2021-May/CVE-2020-20178Important

Ethereum 0xe933c0cd9784414d5f278c114904f5a84b396919#code.sol latest version is affected by a denial of service vulnerability in the affected payout function. Once the length of this array is too long it will result in an exception. Attackers can make attacks by creating a series of account addresses.

May 11, 2021

References

etherscan.io / address/0xe933c0cd9784414d5f278c114904f5a84b396919
Vendor Advisory