CVE-2020-15778

CVE-2020-15778 describes a command injection vulnerability in the scp.c toremote function of OpenSSH through version 8.3p1, specifically when handling backtick characters in the destination argument. This flaw affects products from Broadcom, NetApp, and OpenBSD. With a CVSS score of 7.4 (High), it can be exploited via an adjacent network with low privileges and user interaction, potentially leading to high confidentiality, integrity, and availability impacts. While the vendor considers this an intentional omission for workflow compatibility, there is no evidence of active exploitation, readily available exploit code (Metasploit, Nuclei, ExploitDB), or significant media coverage, though it has seen some community discussion.