{"id":"CVE-2019-6110","title":"In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files …","summary":"In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files …","severity":"medium","cvss":6.8,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cwe":["CWE-838","CWE-838"],"vendor":"openbsd","product":"openssh","affected":["openssh <= 7.9","winscp <= 5.13","element_software","ontap_select_deploy","storage_automation_store","scalance_x204rna_firmware < 3.2.7","scalance_x204rna_eec_firmware < 3.2.7"],"patched":["scalance_x204rna_firmware 3.2.7","scalance_x204rna_eec_firmware 3.2.7"],"published":"2019-01-31","updated":"2026-10-14","sourceUpdated":"2026-10-14T07:16:55.917","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2019-6110","references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","label":"cve@mitre.org"},{"url":"https://cvsweb.openbsd.org/src/usr.bin/ssh/progressmeter.c","label":"cve@mitre.org"},{"url":"https://cvsweb.openbsd.org/src/usr.bin/ssh/scp.c","label":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201903-16","label":"cve@mitre.org"},{"url":"https://security.netapp.com/advisory/ntap-20190213-0001/","label":"cve@mitre.org"},{"url":"https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt","label":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/46193/","label":"cve@mitre.org"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cvsweb.openbsd.org/src/usr.bin/ssh/progressmeter.c","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cvsweb.openbsd.org/src/usr.bin/ssh/scp.c","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201903-16","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20190213-0001/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/46193/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-412672.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"tags":["nvd","exploit-available"],"epss":0.20906,"epssPercentile":0.97515,"exploits":{"exploitdb":true,"checkedAt":"2026-10-14T07:21:40.622Z"},"exploitAvailable":true,"ingestedAt":"2026-10-14T07:21:04.805Z","slug":"CVE-2019-6110","body":"## Overview\n\nIn OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.\n\n## Affected\n\n- `openssh <= 7.9`\n- `winscp <= 5.13`\n- `element_software`\n- `ontap_select_deploy`\n- `storage_automation_store`\n- `scalance_x204rna_firmware < 3.2.7`\n- `scalance_x204rna_eec_firmware < 3.2.7`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `scalance_x204rna_firmware 3.2.7`\n- `scalance_x204rna_eec_firmware 3.2.7`","depth":"twilight","depthScore":54,"depthScoreParts":{"impact":37.4,"likelihood":4.2,"exploitation":12,"ransomware":0},"changes":[]}