CVE-2019-6111

Exploitation

Public exploit code exists. CISA's assessment records a public proof of concept. That is not a report of exploitation in the wild.

SSVC decision

• ExploitationpocPublic proof-of-concept exploit code exists. Not a report of exploitation in the wild.
• AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
• Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

58.20% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 99.0% of scored records. A rank, not a probability.

NVD base score

5.9 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2019-01-31 00:00Z7 YR AGO

Last updated

2025-12-18 14:35Z8 MO AGO

Reserved

2019-01-10

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Medium (CVSS 5.9)

CNA CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Weaknesses

• CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Base
• CWE-20Improper Input ValidationClass

Data version

5.2

Document digest

0659e01d45c5721a31fa7354e4d48c79d9311edd2e0815298452142d7377b0e8

• www.debian.orgDSA-4387https://www.debian.org/security/2019/dsa-4387vendor-advisory
• security.netapp.comhttps://security.netapp.com/advisory/ntap-20190213-0001/
• www.securityfocus.com106741http://www.securityfocus.com/bid/106741vdb-entry
• cvsweb.openbsd.orghttps://cvsweb.openbsd.org/src/usr.bin/ssh/scp.c
• usn.ubuntu.comUSN-3885-1https://usn.ubuntu.com/3885-1/vendor-advisory
• usn.ubuntu.comUSN-3885-2https://usn.ubuntu.com/3885-2/vendor-advisory
• bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=1677794
• sintonen.fihttps://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt
• www.exploit-db.com46193https://www.exploit-db.com/exploits/46193/exploit
• security.gentoo.orgGLSA-201903-16https://security.gentoo.org/glsa/201903-16vendor-advisory
• lists.debian.org[debian-lts-announce] 20190325 [SECURITY] [DLA 1728-1] openssh security updatehttps://lists.debian.org/debian-lts-announce/2019/03/msg00030.htmlmailing-list
• www.openwall.com[oss-security] 20190417 Announce: OpenSSH 8.0 releasedhttp://www.openwall.com/lists/oss-security/2019/04/18/1mailing-list
• lists.fedoraproject.orgFEDORA-2019-0f4190cdb0https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W3YVQ2BPTOVDCFDVNC2GGF5P5ISFG37G/vendor-advisory
• lists.apache.org[mina-dev] 20190620 [jira] [Created] (SSHD-925) See if SCP vulnerability CVE-2019-6111 applies and mitigate it if sohttps://lists.apache.org/thread.html/c45d9bc90700354b58fb7455962873c44229841880dcb64842fa7d23%40%3Cdev.mina.apache.org%3Emailing-list
• lists.apache.org[mina-dev] 20190623 [jira] [Comment Edited] (SSHD-925) See if SCP vulnerability CVE-2019-6111 applies and mitigate it if sohttps://lists.apache.org/thread.html/c7301cab36a86825359e1b725fc40304d1df56dc6d107c1fe885148b%40%3Cdev.mina.apache.org%3Emailing-list
• lists.apache.org[mina-dev] 20190623 [jira] [Commented] (SSHD-925) See if SCP vulnerability CVE-2019-6111 applies and mitigate it if sohttps://lists.apache.org/thread.html/e47597433b351d6e01a5d68d610b4ba195743def9730e49561e8cf3f%40%3Cdev.mina.apache.org%3Emailing-list
• lists.opensuse.orgopenSUSE-SU-2019:1602http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00058.htmlvendor-advisory
• www.freebsd.orgFreeBSD-EN-19:10https://www.freebsd.org/security/advisories/FreeBSD-EN-19:10.scp.ascvendor-advisory
• lists.apache.org[mina-dev] 20190820 [jira] [Resolved] (SSHD-925) See if SCP vulnerability CVE-2019-6111 applies and mitigate it if sohttps://lists.apache.org/thread.html/d540139359de999b0f1c87d05b715be4d7d4bec771e1ae55153c5c7a%40%3Cdev.mina.apache.org%3Emailing-list
• www.oracle.comhttps://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
• access.redhat.comRHSA-2019:3702https://access.redhat.com/errata/RHSA-2019:3702vendor-advisory
• www.openwall.com[oss-security] 20220802 CVE-2022-29154: Rsync client-side arbitrary file write vulnerability.http://www.openwall.com/lists/oss-security/2022/08/02/1mailing-list
• cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf