CVE-2020-8169

Katalog CVE

CVSS 7.5 · High EPSS 3,5%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada haxx curl, siemens simatic tim 1531 irc firmware +3 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).

Rincian

Terbit di NVD

14 Desember 2020

Terakhir diubah

14 Oktober 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

EPSS (30 hari)

3,5% peluang dieksploitasi; lebih tinggi dari 88,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://curl.se/docs/CVE-2020-8169.html advisory vendor
• https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf patch · advisory pihak ketiga
• https://cert-portal.siemens.com/productcert/pdf/ssa-200951.pdf advisory pihak ketiga
• https://hackerone.com/reports/874778 exploit · advisory pihak ketiga
• https://www.debian.org/security/2021/dsa-4881 advisory pihak ketiga
• https://cert-portal.siemens.com/productcert/html/ssa-200951.html
• https://cert-portal.siemens.com/productcert/html/ssa-389290.html
• https://cert-portal.siemens.com/productcert/html/ssa-398330.html