CVE-2025-32433

🗓️ 16 Apr 2025 21:34:37Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 63 Media mentions👁 874 Views🌐 WEB

Erlang/OTP SSH vulnerability allows unauthenticated remote code execution in unpatched versions.

Reporter	Title	Published	Views	Family All 178
GithubExploit	Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp	27 Sep 202609:22	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp	13 Aug 202504:34	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp	19 Apr 202518:32	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp	18 Apr 202521:07	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp	7 Sep 202516:11	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp	12 Jun 202622:44	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp	24 Jul 202606:37	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp	25 Apr 202515:31	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp	27 Nov 202521:38	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp	8 Nov 202506:58	–	githubexploit

NVD

Vulners

Node

erlang erlang/otpRange<25.3.2.20

erlang erlang/otpRange26.0–26.2.5.11

erlang erlang/otpRange27.0–27.3.3

Node

cisco confd_basicRange<7.7.19.1

cisco confd_basicRange8.0.18–8.1.16.2

cisco confd_basicRange8.2–8.2.11.1

cisco confd_basicRange8.3–8.3.8.1

cisco confd_basicRange8.4–8.4.4.1

Node

cisco network_services_orchestratorRange<5.7.19.1

cisco network_services_orchestratorRange5.8–6.1.16.2

cisco network_services_orchestratorRange6.2–6.2.11.1

cisco network_services_orchestratorRange6.3–6.3.8.1

cisco network_services_orchestratorRange6.4–6.4.1.1

cisco network_services_orchestratorRange6.4.2–6.4.4.1

Node

cisco cloud_native_broadband_network_gatewayRange<2025.03.1

cisco inode_managerMatch-

cisco smart_phyRange<25.2

cisco ultra_packet_coreRange<2025.03

cisco ultra_services_platformMatch-

cisco starosRange<2025.03

Node

AND

cisco optical_site_managerRange<25.2.1

cisco ncs_1001Match-

cisco ncs_1002Match-

cisco ncs_1004Match-

Node

AND

cisco ncs_2000_shelf_virtualization_orchestrator_firmwareRange<25.1.1

cisco ncs_2000_shelf_virtualization_orchestrator_moduleMatch-

Node

cisco enterprise_nfv_infrastructure_softwareRange<4.18

cisco ultra_cloud_coreRange<2025.03.1

Node

AND

cisco rv160w_firmwareMatch-

cisco rv160wMatch-

Node

AND

cisco rv260_firmwareMatch-

cisco rv260Match-

Node

AND

cisco rv160_firmwareMatch-

cisco rv160Match-

Node

AND

cisco rv260p_firmwareMatch-

cisco rv260pMatch-

Node

AND

cisco rv260w_firmwareMatch-

cisco rv260wMatch-

Node

AND

cisco rv340_firmwareMatch-

cisco rv340Match-

Node

AND

cisco rv340w_firmwareMatch-

cisco rv340wMatch-

Node

AND

cisco rv345_firmwareMatch-

cisco rv345Match-

Node

AND

cisco rv345p_firmwareMatch-

cisco rv345pMatch-

Node

debian debian_linuxMatch11.0

[
  {
    "vendor": "erlang",
    "product": "otp",
    "versions": [
      {
        "version": ">= OTP-27.0-rc1, < OTP-27.3.3",
        "status": "affected"
      },
      {
        "version": ">= OTP-26.0-rc1, < OTP-26.2.5.11",
        "status": "affected"
      },
      {
        "version": "< OTP-25.3.2.20",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2
github	www.github.com/erlang/otp/commit/6eef04130afc8b0ccb63c9a0d8650209cf54892f
github	www.github.com/erlang/otp/commit/0fcd9c56524b28615e8ece65fc0c3f66ef6e4c12
github	www.github.com/erlang/otp/commit/b1924d37fd83c070055beb115d5d6a6a9490b891
openwall	www.openwall.com/lists/oss-security/2025/04/16/2
openwall	www.openwall.com/lists/oss-security/2025/04/19/1
security	www.security.netapp.com/advisory/ntap-20250425-0001/
github	www.github.com/ProDefense/CVE-2025-32433/blob/main/CVE-2025-32433.py
lists	www.lists.debian.org/debian-lts-announce/2025/04/msg00028.html
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-erlang-otp-ssh-xyZZy

Parameter	Position	Path	Description	CWE
SSH_MSG_KEXINIT	nested	ssh	Pre-authentication remote code execution in Erlang/OTP SSH server. The server fails to properly enforce the SSH protocol sequence, allowing an attacker to send crafted SSH_MSG_CHANNEL_OPEN and SSH_MSG_CHANNEL_REQUEST messages before authentication to execute arbitrary commands.	CWE-306
SSH_MSG_CHANNEL_OPEN	nested	ssh	Pre-authentication remote code execution in Erlang/OTP SSH server. The server fails to properly enforce the SSH protocol sequence, allowing an attacker to send crafted SSH_MSG_CHANNEL_OPEN and SSH_MSG_CHANNEL_REQUEST messages before authentication to execute arbitrary commands.	CWE-306
SSH_MSG_CHANNEL_REQUEST	nested	ssh	Pre-authentication remote code execution in Erlang/OTP SSH server. The server fails to properly enforce the SSH protocol sequence, allowing an attacker to send crafted SSH_MSG_CHANNEL_OPEN and SSH_MSG_CHANNEL_REQUEST messages before authentication to execute arbitrary commands.	CWE-306

17 Jun 2026 09:11Current

8.7High risk

Vulners AI Score8.7

CVSS 3.110

EPSS0.98924

SSVC