Medium severity · published Jan 31, 2019
CVE-2019-6110
In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for…
6.8
CVSS
24.9%
EPSS
No
On KEV
Description
In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)24.9% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ES
Element Software · Netapp
All versions, or not specified · source: NVD
OS
Ontap Select Deploy · Netapp
All versions, or not specified · source: NVD
OP
Openssh · Openbsd
through 7.9 · source: NVD
SX
Scalance X204rna Eec Firmware · Siemens
before 3.2.7 · source: NVD
SX
Scalance X204rna Firmware · Siemens
before 3.2.7 · source: NVD
SA
Storage Automation Store · Netapp
All versions, or not specified · source: NVD
WI
Winscp · Winscp
through 5.13 · source: NVD
SS
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · Siemens
V3.1.0 before V3.1.5; V3.1.0 before V3.1.5 · source: CISA
SS
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · Siemens
V3.1.0 before V3.1.5; V3.1.0 before V3.1.5 · source: CISA
SS
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · Siemens
V3.1.0 before V3.1.5 · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-6110
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-6110
Patch
https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
Release Notes
https://cvsweb.openbsd.org/src/usr.bin/ssh/progressmeter.c
Release Notes
https://cvsweb.openbsd.org/src/usr.bin/ssh/scp.c
Third Party Advisory
https://security.gentoo.org/glsa/201903-16
Third Party Advisory
https://security.netapp.com/advisory/ntap-20190213-0001/
Third Party Advisory
https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt
More from Element Software
9.8
CVE-2022-32207
When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final…
9.8
CVE-2019-11068
libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code
9.8
CVE-2017-7657
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled…
9.8
CVE-2018-7183
Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by leveraging an ntpq query and sending a…
9.8
CVE-2018-6485
An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to…