CVE:CVE-2020-15778
CNNVD:CNNVD-202007-1519
OpenSSH（OpenBSD Secure Shell）是加拿大OpenBSD计划组的一套用于安全访问远程计算机的连接工具。该工具是SSH协议的开源实现，支持对所有的传输进行加密，可有效阻止窃听、连接劫持以及其他网络级的攻击。
OpenSSH 8.3p1及之前版本中的scp的scp.c文件存在操作系统命令注入漏洞。该漏洞源于外部输入数据构造操作系统可执行命令过程中，网络系统或产品未正确过滤其中的特殊字符、命令等。攻击者可利用该漏洞执行非法操作系统命令。
solution:Upgrade openbsd openssh to a higher version than 8.3,8.3,8.3:p1,and avoid the version (,8.3),8.3,8.3:p1; Upgrade netapp a700s_firmware to a higher version than -; netapp active_iq_unified_manager avoid the version [9.5,); Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade netapp steelstore_cloud_integrated_storage to a higher version than -; Upgrade netapp hci_compute_node to a higher version than -; Upgrade netapp hci_storage_node to a higher version than -; Upgrade broadcom fabric_operating_system to a higher version than -