CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-15778

scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows."

Exploit prediction scoring system (EPSS) score

EPSS Score 0.656

EPSS Ranking 98.4%

CVSS Severity

CVSS v3 Score 7.8

CVSS v2 Score 6.8

References

Products affected by CVE-2020-15778

Netapp » Active Iq Unified Manager » Version: 9.10

cpe:2.3:a:netapp:active_iq_unified_manager:9.10
Netapp » Active Iq Unified Manager » Version: 9.5

cpe:2.3:a:netapp:active_iq_unified_manager:9.5
Netapp » Active Iq Unified Manager » Version: 9.6

cpe:2.3:a:netapp:active_iq_unified_manager:9.6
Netapp » Hci Management Node » Version: N/A

cpe:2.3:a:netapp:hci_management_node:-
Netapp » Solidfire » Version: N/A

cpe:2.3:a:netapp:solidfire:-
Netapp » Steelstore Cloud Integrated Storage » Version: N/A

cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-
Openbsd » Openssh » Version: N/A

cpe:2.3:a:openbsd:openssh:-
Openbsd » Openssh » Version: 1.2

cpe:2.3:a:openbsd:openssh:1.2
Openbsd » Openssh » Version: 1.2.1

cpe:2.3:a:openbsd:openssh:1.2.1
Openbsd » Openssh » Version: 1.2.2

cpe:2.3:a:openbsd:openssh:1.2.2
Openbsd » Openssh » Version: 1.2.27

cpe:2.3:a:openbsd:openssh:1.2.27
Openbsd » Openssh » Version: 1.2.3

cpe:2.3:a:openbsd:openssh:1.2.3
Openbsd » Openssh » Version: 1.3

cpe:2.3:a:openbsd:openssh:1.3
Openbsd » Openssh » Version: 1.5

cpe:2.3:a:openbsd:openssh:1.5
Openbsd » Openssh » Version: 1.5.7

cpe:2.3:a:openbsd:openssh:1.5.7
Openbsd » Openssh » Version: 1.5.8

cpe:2.3:a:openbsd:openssh:1.5.8
Openbsd » Openssh » Version: 2

cpe:2.3:a:openbsd:openssh:2
Openbsd » Openssh » Version: 2.1

cpe:2.3:a:openbsd:openssh:2.1
Openbsd » Openssh » Version: 2.1.0

cpe:2.3:a:openbsd:openssh:2.1.0
Openbsd » Openssh » Version: 2.1.1

cpe:2.3:a:openbsd:openssh:2.1.1
Openbsd » Openssh » Version: 2.2

cpe:2.3:a:openbsd:openssh:2.2
Openbsd » Openssh » Version: 2.2.0

cpe:2.3:a:openbsd:openssh:2.2.0
Openbsd » Openssh » Version: 2.3

cpe:2.3:a:openbsd:openssh:2.3
Openbsd » Openssh » Version: 2.3.0

cpe:2.3:a:openbsd:openssh:2.3.0
Openbsd » Openssh » Version: 2.3.1

cpe:2.3:a:openbsd:openssh:2.3.1
Openbsd » Openssh » Version: 2.5

cpe:2.3:a:openbsd:openssh:2.5
Openbsd » Openssh » Version: 2.5.1

cpe:2.3:a:openbsd:openssh:2.5.1
Openbsd » Openssh » Version: 2.5.2

cpe:2.3:a:openbsd:openssh:2.5.2
Openbsd » Openssh » Version: 2.9

cpe:2.3:a:openbsd:openssh:2.9
Openbsd » Openssh » Version: 2.9.9

cpe:2.3:a:openbsd:openssh:2.9.9
Openbsd » Openssh » Version: 2.9.9p2

cpe:2.3:a:openbsd:openssh:2.9.9p2
Openbsd » Openssh » Version: 2.9p1

cpe:2.3:a:openbsd:openssh:2.9p1
Openbsd » Openssh » Version: 2.9p2

cpe:2.3:a:openbsd:openssh:2.9p2
Openbsd » Openssh » Version: 3.0

cpe:2.3:a:openbsd:openssh:3.0
Openbsd » Openssh » Version: 3.0.1

cpe:2.3:a:openbsd:openssh:3.0.1
Openbsd » Openssh » Version: 3.0.1p1

cpe:2.3:a:openbsd:openssh:3.0.1p1
Openbsd » Openssh » Version: 3.0.2

cpe:2.3:a:openbsd:openssh:3.0.2
Openbsd » Openssh » Version: 3.0.2p1

cpe:2.3:a:openbsd:openssh:3.0.2p1
Openbsd » Openssh » Version: 3.0p1

cpe:2.3:a:openbsd:openssh:3.0p1
Openbsd » Openssh » Version: 3.1

cpe:2.3:a:openbsd:openssh:3.1
Openbsd » Openssh » Version: 3.1p1

cpe:2.3:a:openbsd:openssh:3.1p1
Openbsd » Openssh » Version: 3.2

cpe:2.3:a:openbsd:openssh:3.2
Openbsd » Openssh » Version: 3.2.2

cpe:2.3:a:openbsd:openssh:3.2.2
Openbsd » Openssh » Version: 3.2.2p1

cpe:2.3:a:openbsd:openssh:3.2.2p1
Openbsd » Openssh » Version: 3.2.3

cpe:2.3:a:openbsd:openssh:3.2.3
Openbsd » Openssh » Version: 3.2.3p1

cpe:2.3:a:openbsd:openssh:3.2.3p1
Openbsd » Openssh » Version: 3.3

cpe:2.3:a:openbsd:openssh:3.3
Openbsd » Openssh » Version: 3.3p1

cpe:2.3:a:openbsd:openssh:3.3p1
Openbsd » Openssh » Version: 3.4

cpe:2.3:a:openbsd:openssh:3.4
Openbsd » Openssh » Version: 3.4p1

cpe:2.3:a:openbsd:openssh:3.4p1
Openbsd » Openssh » Version: 3.5

cpe:2.3:a:openbsd:openssh:3.5
Openbsd » Openssh » Version: 3.5p1

cpe:2.3:a:openbsd:openssh:3.5p1
Openbsd » Openssh » Version: 3.6

cpe:2.3:a:openbsd:openssh:3.6
Openbsd » Openssh » Version: 3.6.1

cpe:2.3:a:openbsd:openssh:3.6.1
Openbsd » Openssh » Version: 3.6.1p1

cpe:2.3:a:openbsd:openssh:3.6.1p1
Openbsd » Openssh » Version: 3.6.1p2

cpe:2.3:a:openbsd:openssh:3.6.1p2
Openbsd » Openssh » Version: 3.7

cpe:2.3:a:openbsd:openssh:3.7
Openbsd » Openssh » Version: 3.7.1

cpe:2.3:a:openbsd:openssh:3.7.1
Openbsd » Openssh » Version: 3.7.1p1

cpe:2.3:a:openbsd:openssh:3.7.1p1
Openbsd » Openssh » Version: 3.7.1p2

cpe:2.3:a:openbsd:openssh:3.7.1p2
Openbsd » Openssh » Version: 3.8

cpe:2.3:a:openbsd:openssh:3.8
Openbsd » Openssh » Version: 3.8.1

cpe:2.3:a:openbsd:openssh:3.8.1
Openbsd » Openssh » Version: 3.8.1p1

cpe:2.3:a:openbsd:openssh:3.8.1p1
Openbsd » Openssh » Version: 3.9

cpe:2.3:a:openbsd:openssh:3.9
Openbsd » Openssh » Version: 3.9.1

cpe:2.3:a:openbsd:openssh:3.9.1
Openbsd » Openssh » Version: 3.9.1p1

cpe:2.3:a:openbsd:openssh:3.9.1p1
Openbsd » Openssh » Version: 4.0

cpe:2.3:a:openbsd:openssh:4.0
Openbsd » Openssh » Version: 4.0p1

cpe:2.3:a:openbsd:openssh:4.0p1
Openbsd » Openssh » Version: 4.1

cpe:2.3:a:openbsd:openssh:4.1
Openbsd » Openssh » Version: 4.1p1

cpe:2.3:a:openbsd:openssh:4.1p1
Openbsd » Openssh » Version: 4.2

cpe:2.3:a:openbsd:openssh:4.2
Openbsd » Openssh » Version: 4.2p1

cpe:2.3:a:openbsd:openssh:4.2p1
Openbsd » Openssh » Version: 4.3

cpe:2.3:a:openbsd:openssh:4.3
Openbsd » Openssh » Version: 4.3p1

cpe:2.3:a:openbsd:openssh:4.3p1
Openbsd » Openssh » Version: 4.3p2

cpe:2.3:a:openbsd:openssh:4.3p2
Openbsd » Openssh » Version: 4.4

cpe:2.3:a:openbsd:openssh:4.4
Openbsd » Openssh » Version: 4.4p1

cpe:2.3:a:openbsd:openssh:4.4p1
Openbsd » Openssh » Version: 4.5

cpe:2.3:a:openbsd:openssh:4.5
Openbsd » Openssh » Version: 4.6

cpe:2.3:a:openbsd:openssh:4.6
Openbsd » Openssh » Version: 4.7

cpe:2.3:a:openbsd:openssh:4.7
Openbsd » Openssh » Version: 4.7p1

cpe:2.3:a:openbsd:openssh:4.7p1
Openbsd » Openssh » Version: 4.8

cpe:2.3:a:openbsd:openssh:4.8
Openbsd » Openssh » Version: 4.9

cpe:2.3:a:openbsd:openssh:4.9
Openbsd » Openssh » Version: 5.0

cpe:2.3:a:openbsd:openssh:5.0
Openbsd » Openssh » Version: 5.1

cpe:2.3:a:openbsd:openssh:5.1
Openbsd » Openssh » Version: 5.2

cpe:2.3:a:openbsd:openssh:5.2
Openbsd » Openssh » Version: 5.3

cpe:2.3:a:openbsd:openssh:5.3
Openbsd » Openssh » Version: 5.4

cpe:2.3:a:openbsd:openssh:5.4
Openbsd » Openssh » Version: 5.5

cpe:2.3:a:openbsd:openssh:5.5
Openbsd » Openssh » Version: 5.6

cpe:2.3:a:openbsd:openssh:5.6
Openbsd » Openssh » Version: 5.7

cpe:2.3:a:openbsd:openssh:5.7
Openbsd » Openssh » Version: 5.8

cpe:2.3:a:openbsd:openssh:5.8
Openbsd » Openssh » Version: 5.8p2

cpe:2.3:a:openbsd:openssh:5.8p2
Openbsd » Openssh » Version: 5.9

cpe:2.3:a:openbsd:openssh:5.9
Openbsd » Openssh » Version: 6.0

cpe:2.3:a:openbsd:openssh:6.0
Openbsd » Openssh » Version: 6.1

cpe:2.3:a:openbsd:openssh:6.1
Openbsd » Openssh » Version: 6.2

cpe:2.3:a:openbsd:openssh:6.2
Openbsd » Openssh » Version: 6.3

cpe:2.3:a:openbsd:openssh:6.3
Openbsd » Openssh » Version: 6.4

cpe:2.3:a:openbsd:openssh:6.4
Openbsd » Openssh » Version: 6.5

cpe:2.3:a:openbsd:openssh:6.5
Openbsd » Openssh » Version: 6.6

cpe:2.3:a:openbsd:openssh:6.6
Openbsd » Openssh » Version: 6.7

cpe:2.3:a:openbsd:openssh:6.7
Openbsd » Openssh » Version: 6.8

cpe:2.3:a:openbsd:openssh:6.8
Openbsd » Openssh » Version: 6.9

cpe:2.3:a:openbsd:openssh:6.9
Openbsd » Openssh » Version: 7.0

cpe:2.3:a:openbsd:openssh:7.0
Openbsd » Openssh » Version: 7.1

cpe:2.3:a:openbsd:openssh:7.1
Openbsd » Openssh » Version: 7.2

cpe:2.3:a:openbsd:openssh:7.2
Openbsd » Openssh » Version: 7.3

cpe:2.3:a:openbsd:openssh:7.3
Openbsd » Openssh » Version: 7.4

cpe:2.3:a:openbsd:openssh:7.4
Openbsd » Openssh » Version: 7.5

cpe:2.3:a:openbsd:openssh:7.5
Openbsd » Openssh » Version: 7.6

cpe:2.3:a:openbsd:openssh:7.6
Openbsd » Openssh » Version: 7.7

cpe:2.3:a:openbsd:openssh:7.7
Openbsd » Openssh » Version: 7.8

cpe:2.3:a:openbsd:openssh:7.8
Openbsd » Openssh » Version: 7.9

cpe:2.3:a:openbsd:openssh:7.9
Openbsd » Openssh » Version: 8.0

cpe:2.3:a:openbsd:openssh:8.0
Openbsd » Openssh » Version: 8.1

cpe:2.3:a:openbsd:openssh:8.1
Openbsd » Openssh » Version: 8.2

cpe:2.3:a:openbsd:openssh:8.2
Openbsd » Openssh » Version: 8.3

cpe:2.3:a:openbsd:openssh:8.3
Netapp » A700s » Version: N/A

cpe:2.3:h:netapp:a700s:-
Netapp » Hci Compute Node » Version: N/A

cpe:2.3:h:netapp:hci_compute_node:-
Netapp » Hci Storage Node » Version: N/A

cpe:2.3:h:netapp:hci_storage_node:-
Broadcom » Fabric Operating System » Version: N/A

cpe:2.3:o:broadcom:fabric_operating_system:-
Netapp » A700s Firmware » Version: N/A

cpe:2.3:o:netapp:a700s_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-15778

Products

Pricing

Contact Us