CVE:CVE-2020-8177
CNNVD:CNNVD-202006-1661
HAXX Haxx curl是瑞典Haxx（HAXX）公司的一套利用URL语法在命令行下工作的文件传输工具。该工具支持文件上传和下载，并包含一个用于程序开发的libcurl（客户端URL传输库）。
Haxx curl 7.20.0版本至7.71.0之前版本中存在注入漏洞。攻击者可利用该漏洞覆盖本地文件。
solution:Upgrade haxx curl to a higher version than 7.70.0,and avoid the version [7.20.0,7.70.0]; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0; Upgrade fujitsu m10-1_firmware to a higher version than xcp2410,xcp3110,and avoid the version (,xcp2410),(,xcp3110); Upgrade fujitsu m10-4_firmware to a higher version than xcp2410,xcp3110,and avoid the version (,xcp2410),(,xcp3110); Upgrade fujitsu m10-4s_firmware to a higher version than xcp2410,xcp3110,and avoid the version (,xcp2410),(,xcp3110); Upgrade fujitsu m12-1_firmware to a higher version than xcp2410,xcp3110,and avoid the version (,xcp2410),(,xcp3110); Upgrade fujitsu m12-2_firmware to a higher version than xcp2410,xcp3110,and avoid the version (,xcp2410),(,xcp3110); Upgrade fujitsu m12-2s_firmware to a higher version than xcp2410,xcp3110,and avoid the version (,xcp2410),(,xcp3110); Upgrade siemens sinec_infrastructure_network_services to a higher version than 1.0.1.1,and avoid the version (,1.0.1.1)