scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows."

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K04305530 advisory.

  - ** DISPUTED ** scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as     demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated     that they intentionally omit validation of anomalous argument transfers because that could stand a     great chance of breaking existing workflows. (CVE-2020-15778)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202212-06 (OpenSSH: Multiple Vulnerabilities)

  - ** DISPUTED ** scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as     demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated     that they intentionally omit validation of anomalous argument transfers because that could stand a     great chance of breaking existing workflows. (CVE-2020-15778)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its banner, the version of OpenSSH running on the remote host is potentially affected by multiple vulnerabilities.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the version of the openssh packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - ** DISPUTED ** scp in OpenSSH through 8.3p1 allows     command injection in the scp.c toremote function, as     demonstrated by backtick characters in the destination     argument. NOTE: the vendor reportedly has stated that     they intentionally omit validation of 'anomalous     argument transfers' because that could 'stand a great     chance of breaking existing workflows.'(CVE-2020-15778)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the openssh packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - scp in OpenSSH through 8.3p1 allows command injection     in scp.c remote function, as demonstrated by backtick     characters in the destination argument. NOTE: the     vendor reportedly has stated that they intentionally     omit validation of 'anomalous argument transfers'     because that could 'stand a great chance of breaking     existing workflows.'(CVE-2020-15778)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The IBM Spectrum Protect Plus running on the remote host is affected by a remote command injection vulnerability due to improper input validation in the remote function in scp.c. An unauthenticated, remote attacker can exploit this, by using backtick characters in the destination argument, to execute arbitrary commands on the system.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version   number.

According to the version of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - scp in OpenSSH through 8.3p1 allows command injection     in the scp.c toremote function, as demonstrated by     backtick characters in the destination argument. NOTE:
    the vendor reportedly has stated that they     intentionally omit validation of 'anomalous argument     transfers' because that could 'stand a great chance of     breaking existing workflows.'(CVE-2020-15778)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
179676	F5 Networks BIG-IP : SCP vulnerability (K04305530)	Nessus	F5 Networks Local Security Checks	high
169409	GLSA-202212-06 : OpenSSH: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	high
159492	OpenSSH PCI Disputed Vulnerabilities.	Nessus	Misc.	high
151319	EulerOS Virtualization for ARM 64 3.0.2.0 : openssh (EulerOS-SA-2021-2097)	Nessus	Huawei Local Security Checks	high
151235	EulerOS Virtualization 3.0.6.6 : openssh (EulerOS-SA-2021-2039)	Nessus	Huawei Local Security Checks	high
151168	EulerOS Virtualization for ARM 64 3.0.6.0 : openssh (EulerOS-SA-2021-2018)	Nessus	Huawei Local Security Checks	high
151155	IBM Spectrum Protect Plus OpenSSH Remote Command Injection	Nessus	Misc.	high
151035	EulerOS 2.0 SP8 : openssh (EulerOS-SA-2021-1993)	Nessus	Huawei Local Security Checks	high

Detections

Analytics

CVE-2020-15778

high

Tenable Plugins

high

high

high

high

high

high

high

high