In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.
Fix
Public exploits 2
- SCP Client - Multiple Vulnerabilities (SSHtranger Things) (remote · multiple) Exploit-DB · 2019-01-18
- OpenSSH SCP Client - Write Arbitrary Files (remote · multiple) Exploit-DB · 2019-01-11
Each line links to the index that lists it, never to exploit code. Exploit-DB's "verified" and a Metasploit rank of good or better count as verified; a PoC-in-GitHub entry is a repository's claim.
Patch, vendor advisory and mitigation references on NVD 2
- https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf Patch, Third Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf Patch, Third Party Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 6.8 · openbsd, winscp, netappNVD modified 2026-10-14 07:16
Affected (CPE criteria) 7
cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*cpe:2.3:a:winscp:winscp:*:*:*:*:*:*:*:*cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:ontap_select_deploy:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:storage_automation_store:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:scalance_x204rna_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:siemens:scalance_x204rna_eec_firmware:*:*:*:*:*:*:*:*
References 16
- https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf Patch, Third Party Advisory
- https://cvsweb.openbsd.org/src/usr.bin/ssh/progressmeter.c Release Notes
- https://cvsweb.openbsd.org/src/usr.bin/ssh/scp.c Release Notes
- https://security.gentoo.org/glsa/201903-16 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20190213-0001/ Third Party Advisory
- https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt Third Party Advisory
- https://www.exploit-db.com/exploits/46193/ Exploit, Third Party Advisory, VDB Entry
- https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf Patch, Third Party Advisory
- https://cvsweb.openbsd.org/src/usr.bin/ssh/progressmeter.c Release Notes
- https://cvsweb.openbsd.org/src/usr.bin/ssh/scp.c Release Notes
- https://security.gentoo.org/glsa/201903-16 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20190213-0001/ Third Party Advisory
- https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt Third Party Advisory
- https://www.exploit-db.com/exploits/46193/ Exploit, Third Party Advisory, VDB Entry
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cert-portal.siemens.com/productcert/html/ssa-412672.html