CVE-2020-15778

Published: Jul 24, 2020Modified: Jun 17, 2026

7.4

Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.5 / Impact: 5.9

Source: NVD

Description

scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows."

Affected (11)

Products: Openbsd: Openssh · Netapp: A700s Firmware, Active Iq Unified Manager, Hci Compute Node, Hci Management Node, Hci Storage Node, Solidfire, Steelstore Cloud Integrated Storage · Broadcom: Fabric Operating System

1 product

7 products

Active Iq Unified Manager

Steelstore Cloud Integrated Storage

Broadcom

1 product

Fabric Operating System

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Openbsd Openssh	Before 8.3
Openbsd Openssh	Version 8.3
Openbsd Openssh	Version 8.3 p1

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp A700s Firmware	All versions

Running on/with	Platform Versions
Netapp A700s	All versions

Configuration C

7 vulnerable

Vulnerable Software	Affected Versions
Broadcom Fabric Operating System	All versions
Netapp Active Iq Unified Manager	From 9.5
Netapp Hci Compute Node	All versions
Netapp Hci Management Node	All versions
Netapp Hci Storage Node	All versions
Netapp Solidfire	All versions
Netapp Steelstore Cloud Integrated Storage	All versions