CVE Feed

    Dashboard / CVE / CVE-2025-32433

    CVE-2025-32433

    Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.

    Published:Apr 16, 2025
    Last Modified:Feb 26, 2026
    EPS:Apr 16, 2025
    EPSS Score:0.50314
    CVSS Score:10

    CISA Notification

    Description

    Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.

    Required Action:

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

    Notes:

    No extra notes provided.

    Due Date
    Jun 30, 2025
    438 days ago
    Alert Date
    Jun 9, 2025
    459 days ago

    Affected Products

    Vendor
    Cisco
    Product
    Cloud Native Broadband Network Gateway
    Vendor
    Cisco
    Product
    Confd Basic
    Vendor
    Cisco
    Product
    Enterprise Nfv Infrastructure Software
    Vendor
    Cisco
    Product
    Inode Manager
    Vendor
    Cisco
    Product
    Ncs 1001
    Vendor
    Cisco
    Product
    Ncs 1002
    Vendor
    Cisco
    Product
    Ncs 1004
    Vendor
    Cisco
    Product
    Ncs 2000 Shelf Virtualization Orchestrator Firmware
    Vendor
    Cisco
    Product
    Ncs 2000 Shelf Virtualization Orchestrator Module
    Vendor
    Cisco
    Product
    Network Services Orchestrator
    Vendor
    Cisco
    Product
    Optical Site Manager
    Vendor
    Cisco
    Product
    Rv160
    Vendor
    Cisco
    Product
    Rv160 Firmware
    Vendor
    Cisco
    Product
    Rv160w
    Vendor
    Cisco
    Product
    Rv160w Firmware
    Vendor
    Cisco
    Product
    Rv260
    Vendor
    Cisco
    Product
    Rv260 Firmware
    Vendor
    Cisco
    Product
    Rv260p
    Vendor
    Cisco
    Product
    Rv260p Firmware
    Vendor
    Cisco
    Product
    Rv260w
    Vendor
    Cisco
    Product
    Rv260w Firmware
    Vendor
    Cisco
    Product
    Rv340
    Vendor
    Cisco
    Product
    Rv340 Firmware
    Vendor
    Cisco
    Product
    Rv340w
    Vendor
    Cisco
    Product
    Rv340w Firmware
    Vendor
    Cisco
    Product
    Rv345
    Vendor
    Cisco
    Product
    Rv345 Firmware
    Vendor
    Cisco
    Product
    Rv345p
    Vendor
    Cisco
    Product
    Rv345p Firmware
    Vendor
    Cisco
    Product
    Smart Phy
    Vendor
    Cisco
    Product
    Staros
    Vendor
    Cisco
    Product
    Ultra Cloud Core
    Vendor
    Cisco
    Product
    Ultra Packet Core
    Vendor
    Cisco
    Product
    Ultra Services Platform
    Vendor
    Debian
    Product
    Debian Linux
    Vendor
    Erlang
    Product
    Erlang\/otp
    Vendor
    Erlang
    Product
    Otp

    Exploits

    https://github.com/ProDefense/CVE-2025-32433/blob/main/CVE-2025-32433.pyhttps://github.com/0x7556/CVE-2025-32433https://github.com/0xBlackash/CVE-2025-32433https://github.com/0xPThree/cve-2025-32433https://github.com/abrewer251/CVE-2025-32433_Erlang-OTP_PoChttps://github.com/agustfricke/erlang-ssh-rce-CVE-2025-32433https://github.com/AntonieSoga/Erlang-OTP-PoC_CVE-2025-32433https://github.com/Ashwesker/Blackash-CVE-2025-32433https://github.com/B1ack4sh/Blackash-CVE-2025-32433https://github.com/Batman529/PoC-CVE-2025-32433https://github.com/becrevex/CVE-2025-32433https://github.com/bilalz5-github/Erlang-OTP-SSH-CVE-2025-32433https://github.com/blackcat4347/CVE-2025-32433-available-for-windowshttps://github.com/C9b3rD3vi1/Erlang-OTP-SSH-CVE-2025-32433https://github.com/carlosalbertotuma/CVE-2025-32433https://github.com/chuzouX/CVE-2025-32433-Exploit-editedhttps://github.com/dampedcoast/Exploiting-a-vulnerability-using-reverse-shellhttps://github.com/darses/CVE-2025-32433https://github.com/dollarboysushil/CVE-2025-32433-Erlang-OTP-SSH-Unauthenticated-RCEhttps://github.com/ekomsSavior/POC_CVE-2025-32433https://github.com/Epivalent/CVE-2025-32433-detectionhttps://github.com/exa-offsec/ssh_erlangotp_rcehttps://github.com/giriaryan694-a11y/cve-2025-32433_rce_exploithttps://github.com/iteride/CVE-2025-32433https://github.com/joshuavanderpoll/cve-2025-32433https://github.com/Know56/CVE-2025-32433https://github.com/l1nuxkid/CVE-2025-32433-exploithttps://github.com/LemieOne/CVE-2025-32433https://github.com/Liam-Worsley/CVE-2025-32433-PoC-Analysishttps://github.com/m0usem0use/erl_mousehttps://github.com/Mdusmandasthaheer/CVE-2025-32433https://github.com/meloppeitreet/CVE-2025-32433-Remote-Shellhttps://github.com/mirmeweu/cve-2025-32433https://github.com/MrDreamReal/CVE-2025-32433https://github.com/NiteeshPujari/CVE-2025-32433-PoChttps://github.com/ODST-Forge/CVE-2025-32433_PoChttps://github.com/omer-efe-curkus/CVE-2025-32433-Erlang-OTP-SSH-RCE-PoChttps://github.com/platsecurity/CVE-2025-32433https://github.com/ProDefense/CVE-2025-32433https://github.com/ps-interactive/lab_CVE-2025-32433https://github.com/radzek15/CVE-2025-32433https://github.com/razureink/cve-2025-32433-erlang_ssh_rce_reproductionhttps://github.com/scandijamjam1/CVE-2025-32433https://github.com/soltanali0/CVE-2025-32433-Eploithttps://github.com/te0rwx/CVE-2025-32433-Detectionhttps://github.com/teamtopkarl/CVE-2025-32433https://github.com/toshithh/CVE-2025-32433https://github.com/vigilante-1337/CVE-2025-32433https://github.com/yonathanpy/CVE-2025-32433.pyhttps://github.com/Yuri08loveElaina/CVE-2025-32433-Erlang-OTP-SSH-Pre-Auth-RCE-exploit

    References

    https://github.com/erlang/otp/commit/0fcd9c56524b28615e8ece65fc0c3f66ef6e4c12
    https://github.com/erlang/otp/commit/6eef04130afc8b0ccb63c9a0d8650209cf54892f
    https://github.com/erlang/otp/commit/b1924d37fd83c070055beb115d5d6a6a9490b891
    https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2
    http://www.openwall.com/lists/oss-security/2025/04/16/2
    http://www.openwall.com/lists/oss-security/2025/04/18/1
    http://www.openwall.com/lists/oss-security/2025/04/18/2
    http://www.openwall.com/lists/oss-security/2025/04/18/6
    http://www.openwall.com/lists/oss-security/2025/04/19/1
    https://lists.debian.org/debian-lts-announce/2025/04/msg00028.html
    https://security.netapp.com/advisory/ntap-20250425-0001/
    https://github.com/ProDefense/CVE-2025-32433/blob/main/CVE-2025-32433.py
    https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-erlang-otp-ssh-xyZZy
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-32433

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High