תיאור (מקור, אנגלית)
scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows."
מוצרים מושפעים
openbsd: openssh; netapp: a700s firmware; netapp: a700s; netapp: active iq unified manager; netapp: hci management node; netapp: solidfire; netapp: steelstore cloud integrated storage; netapp: hci compute node; netapp: hci storage node; broadcom: fabric operating system
קישורים10
- www.openssh.com/security.html Vendor Advisory
- www.openssh.com/security.html Vendor Advisory
- github.com/cpandya2909/CVE-2020-15778/ ExploitThird Party Advisory
- github.com/cpandya2909/CVE-2020-15778/ ExploitThird Party Advisory
- access.redhat.com/errata/RHSA-2024:3166 Third Party Advisory
- news.ycombinator.com/item?id=25005567 Third Party Advisory
- security.gentoo.org/glsa/202212-06 Third Party Advisory
- security.netapp.com/advisory/ntap-20200731-0007/ Third Party Advisory
- access.redhat.com/errata/RHSA-2024:3166 Third Party Advisory
- news.ycombinator.com/item?id=25005567 Third Party Advisory
מדדים
- CVSS 3.1
-
7.4
HIGH
מקור הציון: NVD
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 14% אחוזון 97 · נכון ל-11 בנובמבר 2026
- CWE
- CWE-78
האם אפשר לנצל את הפגיעות הזו אצלכם?
עדכון אבטחה סוגר את הפרצה הידועה. בדיקת חדירות מראה לאן תוקף עדיין יכול להגיע — עם הוכחה.