CVE-2020-8169: curl from 7.62.0 (inclusive), through 7.70.0 (inclusive); +8 more affected products

Affected technology

curl · from 7.62.0 (inclusive), through 7.70.0 (inclusive)
haxx

simatic tim 1531 irc firmware · before 2.2 (exclusive)
siemens

debian linux · 10.0
debian

sinec infrastructure network services · before 1.0.1.1 (exclusive)
siemens

universal forwarder · from 8.2.0 (inclusive), before 8.2.12 (exclusive)
splunk

universal forwarder · from 9.0.0 (inclusive), before 9.0.6 (exclusive)
splunk

universal forwarder · 9.1.0
splunk

https://github.com/curl/curl · libcurl 7.62.0 to and including 7.70.0
Vendor not specified by the source

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Description’s affected range: through 7.70.0

Component: Not specified by the source

Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

The source reports that an attacker could access information they should not be able to access. NVD’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality impact as high; integrity and availability impact as none.