Exploit for CVE-2016-2434

kitploit · 2026-08-25

Description

Command injection in OpenSSH SCP client via crafted file name allowing arbitrary command execution.

Google Android≤ 6.0.1

9.3

HIGH SEVERITY

Version 2.0

VectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Attack Vector:LOCAL

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:REQUIRED

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Modified:2026-08-25 22:40

Last Seen:2026-08-26 07:56

Reporter:KitPloit

MARKDOWN2 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-JIANQIANGZHAO-CVE-2016-2434
# CVE-2016-2434