TI-2019-04326 Aliases CVE-2019-6110 GHSA-mv2j-4mm8-9xgv

In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server…

HIGH 65CWE-838Published 2019-01-31 · Updated 2026-10-14

Key facts

Attack vector: Network
Privileges required: None
User interaction: Required
Attack complexity: High
Impact type: —
Confidentiality · integrity · availability: High · High · None
Fix status: Will not fix Red Hat: no fix planned

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat.

Summary

In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.24901 97th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by the CNA and NVD

Fix Will not fix Red Hat: no fix planned

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 9

CPE	Versions	Role	Vendor
cpe:2.3:a:openbsd:openssh::::::::	up to 7.9	Vulnerable	OpenBSD
cpe:2.3:a:winscp:winscp::::::::	up to 5.13	Vulnerable	Winscp
cpe:2.3:a:netapp:element_software:-:::::::*	not specified by NVD	Vulnerable	NetApp
cpe:2.3:a:netapp:ontap_select_deploy:-:::::::*	not specified by NVD	Vulnerable	NetApp
cpe:2.3:a:netapp:storage_automation_store:-:::::::*	not specified by NVD	Vulnerable	NetApp
cpe:2.3:o:siemens:scalance_x204rna_firmware::::::::	before 3.2.7	Vulnerable	Siemens
cpe:2.3:h:siemens:scalance_x204rna:-:::::::*	not specified by NVD	Running on	Siemens
cpe:2.3:o:siemens:scalance_x204rna_eec_firmware::::::::	before 3.2.7	Vulnerable	Siemens
cpe:2.3:h:siemens:scalance_x204rna_eec:-:::::::*	not specified by NVD	Running on	Siemens

cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:* Versions up to 7.9 Vulnerable ·OpenBSD
cpe:2.3:a:winscp:winscp:*:*:*:*:*:*:*:* Versions up to 5.13 Vulnerable ·Winscp
cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
cpe:2.3:a:netapp:ontap_select_deploy:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
cpe:2.3:a:netapp:storage_automation_store:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
cpe:2.3:o:siemens:scalance_x204rna_firmware:*:*:*:*:*:*:*:* Versions before 3.2.7 Vulnerable ·Siemens
cpe:2.3:h:siemens:scalance_x204rna:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
cpe:2.3:o:siemens:scalance_x204rna_eec_firmware:*:*:*:*:*:*:*:* Versions before 3.2.7 Vulnerable ·Siemens
cpe:2.3:h:siemens:scalance_x204rna_eec:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat Enterprise Linux 5	Affected	No fix planned: Out of support scope
Red Hat Enterprise Linux 6	Affected	No fix planned: Out of support scope
Red Hat Enterprise Linux 7	Affected	No fix planned: Will not fix
Red Hat Enterprise Linux 8	Affected	No fix planned: Will not fix

Timeline

2026-10-02 Threatist record created from CVE-2019-6110
2026-10-03 Alias added: GHSA-mv2j-4mm8-9xgv

References

Exploit 1

46193

Patch 1

https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf

Advisory 3

Other 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences