Test ID:	1.3.6.1.4.1.25623.1.0.113736
Category:	General
Title:	OpenBSD OpenSSH <= 8.6 Command Injection Vulnerability
Summary:	OpenBSD OpenSSH is prone to a command injection; vulnerability.
Description:	Summary: OpenBSD OpenSSH is prone to a command injection vulnerability. Vulnerability Insight: scp of OpenSSH allows command injection in spc.c via backtick characters in the destination argument. Vulnerability Impact: Successful exploitation would allow an attacker to execute arbitrary code on the target machine. Affected Software/OS: OpenBSD OpenSSH through version 8.6 (initially reported for 8.3p1). Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-15778 https://security.gentoo.org/glsa/202212-06 https://access.redhat.com/errata/RHSA-2024:3166 https://github.com/cpandya2909/CVE-2020-15778/ https://news.ycombinator.com/item?id=25005567 https://www.openssh.com/security.html
Copyright	Copyright (C) 2020 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.