CVE-2025-46712

Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 for OTP-27, OTP-26.2.5.12 for OTP-26, and OTP-25.3.2.21 for OTP-25, Erlang/OTP SSH fails to enforce strict KEX handshake hardening measures by allowing optional messages to be exchanged. This...

CVE-2025-46712 Erlang/OTP SSH Has Strict KEX Violations

Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 for OTP-27, OTP-26.2.5.12 for OTP-26, and OTP-25.3.2.21 for OTP-25, Erlang/OTP SSH fails to enforce strict KEX handshake hardening measures by allowing optional messages to be exchanged. This...

CVE-2025-46712

CVE-2025-46712 describes an SSH handshake hardening bypass in Erlang/OTP: prior to OTP-27.3.4, OTP-26.2.5.12, and OTP-25.3.2.21, the SSH KEX handshake allows optional messages to be exchanged, enabling a MITM attacker to inject messages during the handshake. The issue has been patched in OTP-27.3...

CVE-2025-46712 Erlang/OTP SSH Has Strict KEX Violations

Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 for OTP-27, OTP-26.2.5.12 for OTP-26, and OTP-25.3.2.21 for OTP-25, Erlang/OTP SSH fails to enforce strict KEX handshake hardening measures by allowing optional messages to be exchanged. This...

CVE-2025-4041

In Optigo Networks ONS NC600 versions 4.2.1-084 through 4.7.2-330, an attacker could connect with the device's ssh server and utilize the system's components to perform OS command executions...

PT-2025-20286

Name of the Vulnerable Software and Affected Versions: Dropbear SSH versions prior to 2025.88 Description: The issue allows command injection via an untrusted hostname argument, because a shell is used. This occurs when the dbclient in Dropbear SSH is used with an untrusted hostname...

PT-2025-19913 · Optigo Networks · Optigo Networks Ons Nc600

Name of the Vulnerable Software and Affected Versions: Optigo Networks ONS NC600 versions 4.2.1-084 through 4.7.2-330 Description: An issue exists where an attacker could connect to the device's ssh server and utilize the system's components to perform OS command executions. Recommendations: For...

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

✅ Result The server responded to an SSH message ID 80 0x5...

📄 Erlang-Based SSH OTP Pre-Authentication Remote Code Execution

This Metasploit module detect and exploits CVE-2025-32433, a pre-authentication vulnerability in Erlang-based SSH servers that allows remote command execution. By sending crafted SSH packets, it executes a payload to establish a reverse shell on the target system. The exploit leverages a flaw in...

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

CVE-2025-32433Erlang-OTP This script is a custom security too...

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

CVE-2025-32433Erlang-OTP This script is a custom security too...

Erlang/OTP (Erlang OTP) DoS Vulnerability (Feb 2025) - Linux

Erlang/OTP Erlang OTP is prone to a denial of service DoS vulnerability in the SSH component. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

SUSE-SU-2025:1356-1 Security update for erlang26

This update for erlang26 fixes the following issues: - CVE-2025-30211: Fixed KEX init error results with excessive memory usage bsc1240390 - CVE-2025-32433: Fixed unauthenticated remote code execution in Erlang/OTP SSH bsc1241300...

FreeBSD : Erlang -- Erlang/OTP SSH Vulnerable to Pre-Authentication RCE (06269ae8-1e0d-11f0-ad0b-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 06269ae8-1e0d-11f0-ad0b-b42e991fc52e advisory. [email protected] reports: Erlang/OTP is a set of libraries for the Erlang programming...

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

CVE-2025-32433 Remote Shell Go-based exploit for CVE-2025-3243...

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC The vulnerability allows...

The vulnerability of the SSH protocol implementation in the Erlang/OTP library lies in the lack of authentication checks for a critical function, allowing attackers to execute arbitrary code.

The vulnerability of the SSH protocol implementation in the Erlang/OTP library set is related to the lack of authentication checks for a critical function. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code by sending specially crafted SSH packets...

Erlang/OTP SSH RCE (OTP-19595)

The Erlang/OTP SSH applicaiton installed on the remote host is 4.15.x 4.15.3.12, 5.1.x 5.1.4.8, 5.2.x 5.2.10. Therefore, it is affected by a remote code execution vulnerability due to a flaw in the SSH protocol message handling. An unauthenticated, remote attacker can exploit this to bypass...

AZL-60583 CVE-2025-32433 affecting package erlang for versions less than 25.3.2.20-1

Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution RCE. By exploiting a flaw in SSH protocol message handling, a malicious actor...

CVE-2025-32433

The CVE-2025-32433 issue affects Erlang/OTP’s SSH server and is caused by a flaw in SSH message handling during authentication, enabling an unauthenticated attacker to execute arbitrary commands with the SSH daemon’s privileges (potentially root). Affected OTP versions include OTP-27.3.2?3, OTP-2...