On December 9, 2020, curl published security updates addressing CVE-2020-8284, CVE-2020-8285, and CVE-2020-8286. Previous releases of Puppet Agent contain a vulnerable version of curl. For more information about this vulnerability, refer to the security announcement.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	Name	Product	Family	Published	Updated	Severity
184147	Puppet Agent < 7.1.0 Vulnerability	Nessus	Windows	11/1/2023	11/4/2025	high
194927	Universal Forwarders < 8.1.14, 8.2.0 < 8.2.11, 9.0.0 < 9.0.5 (SVD-2023-0614)	Nessus	CGI abuses	5/2/2024	5/30/2024	critical
504350	Siemens SIMATIC S7-1500 Uncontrolled Recursion (CVE-2020-8285)	Tenable OT Security	Tenable.ot	11/13/2025	11/13/2025	high

Detections

Analytics

Plugins Search

high

critical

high