{"id":"CVE-2025-32433","aliases":["ALPINE-CVE-2025-32433","AZL-60441","AZL-60583","DEBIAN-CVE-2025-32433","DLA-4132-1","DSA-5906-1","EUVD-2025-11793","GHSA-37cp-fgq5-7wc2","OESA-2025-1461","SUSE-SU-2025:1356-1","SUSE-SU-2025:1357-1","UBUNTU-CVE-2025-32433","USN-7443-1","USN-7443-2","USN-7443-3"],"status":"published","title":"Erlang/OTP SSH Vulnerable to Pre-Authentication RCE","description":"Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.","severity":{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.98924,"percentile":0.99928,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":true},"cwes":["CWE-306"],"published":"2025-04-16T00:00:00Z","modified":"2026-11-03T06:32:15Z","kev":{"date_added":"2025-06-09","due_date":"2025-06-30","required_action":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2025-06-09"},{"source":"kev","since":"2025-06-09"}],"exploits":[{"source":"metasploit","id":"exploit/linux/ssh/ssh_erlangotp_rce","title":"Erlang OTP Pre-Auth RCE Scanner and Exploit","type":"exploit","platform":"Linux,Unix","date":"2025-04-16","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/ssh/ssh_erlangotp_rce"},{"source":"pocgithub","id":"LemieOne/CVE-2025-32433","title":"LemieOne/CVE-2025-32433","date":"2025-04-18","url":"https://github.com/LemieOne/CVE-2025-32433"},{"source":"pocgithub","id":"ProDefense/CVE-2025-32433","title":"ProDefense/CVE-2025-32433","date":"2025-04-18","url":"https://github.com/ProDefense/CVE-2025-32433"},{"source":"pocgithub","id":"darses/CVE-2025-32433","title":"darses/CVE-2025-32433","date":"2025-04-18","url":"https://github.com/darses/CVE-2025-32433"},{"source":"pocgithub","id":"ekomsSavior/POC_CVE-2025-32433","title":"ekomsSavior/POC_CVE-2025-32433","date":"2025-04-18","url":"https://github.com/ekomsSavior/POC_CVE-2025-32433"},{"source":"pocgithub","id":"exa-offsec/ssh_erlangotp_rce","title":"exa-offsec/ssh_erlangotp_rce","date":"2025-04-18","url":"https://github.com/exa-offsec/ssh_erlangotp_rce"},{"source":"pocgithub","id":"m0usem0use/erl_mouse","title":"m0usem0use/erl_mouse","date":"2025-04-18","url":"https://github.com/m0usem0use/erl_mouse"},{"source":"pocgithub","id":"omer-efe-curkus/CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC","title":"omer-efe-curkus/CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC","date":"2025-04-18","url":"https://github.com/omer-efe-curkus/CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC"},{"source":"pocgithub","id":"teamtopkarl/CVE-2025-32433","title":"teamtopkarl/CVE-2025-32433","date":"2025-04-18","url":"https://github.com/teamtopkarl/CVE-2025-32433"},{"source":"pocgithub","id":"0xPThree/cve-2025-32433","title":"0xPThree/cve-2025-32433","date":"2025-04-19","url":"https://github.com/0xPThree/cve-2025-32433"},{"source":"pocgithub","id":"meloppeitreet/CVE-2025-32433-Remote-Shell","title":"meloppeitreet/CVE-2025-32433-Remote-Shell","date":"2025-04-19","url":"https://github.com/meloppeitreet/CVE-2025-32433-Remote-Shell"},{"source":"pocgithub","id":"ps-interactive/lab_CVE-2025-32433","title":"ps-interactive/lab_CVE-2025-32433","date":"2025-04-24","url":"https://github.com/ps-interactive/lab_CVE-2025-32433"},{"source":"pocgithub","id":"0x7556/CVE-2025-32433","title":"0x7556/CVE-2025-32433","date":"2025-04-25","url":"https://github.com/0x7556/CVE-2025-32433"},{"source":"pocgithub","id":"becrevex/CVE-2025-32433","title":"becrevex/CVE-2025-32433","date":"2025-04-25","url":"https://github.com/becrevex/CVE-2025-32433"},{"source":"pocgithub","id":"MrDreamReal/CVE-2025-32433","title":"MrDreamReal/CVE-2025-32433","date":"2025-04-27","url":"https://github.com/MrDreamReal/CVE-2025-32433"},{"source":"pocgithub","id":"Know56/CVE-2025-32433","title":"Know56/CVE-2025-32433","date":"2025-04-28","url":"https://github.com/Know56/CVE-2025-32433"},{"source":"pocgithub","id":"ODST-Forge/CVE-2025-32433_PoC","title":"ODST-Forge/CVE-2025-32433_PoC","date":"2025-04-29","url":"https://github.com/ODST-Forge/CVE-2025-32433_PoC"},{"source":"pocgithub","id":"abrewer251/CVE-2025-32433_Erlang-OTP_PoC","title":"abrewer251/CVE-2025-32433_Erlang-OTP_PoC","date":"2025-04-29","url":"https://github.com/abrewer251/CVE-2025-32433_Erlang-OTP_PoC"},{"source":"pocgithub","id":"bilalz5-github/Erlang-OTP-SSH-CVE-2025-32433","title":"bilalz5-github/Erlang-OTP-SSH-CVE-2025-32433","date":"2025-05-02","url":"https://github.com/bilalz5-github/Erlang-OTP-SSH-CVE-2025-32433"},{"source":"pocgithub","id":"vigilante-1337/CVE-2025-32433","title":"vigilante-1337/CVE-2025-32433","date":"2025-05-03","url":"https://github.com/vigilante-1337/CVE-2025-32433"},{"source":"pocgithub","id":"NiteeshPujari/CVE-2025-32433-PoC","title":"NiteeshPujari/CVE-2025-32433-PoC","date":"2025-08-13","url":"https://github.com/NiteeshPujari/CVE-2025-32433-PoC"},{"source":"pocgithub","id":"te0rwx/CVE-2025-32433-Detection","title":"te0rwx/CVE-2025-32433-Detection","date":"2025-08-27","url":"https://github.com/te0rwx/CVE-2025-32433-Detection"},{"source":"pocgithub","id":"Mdusmandasthaheer/CVE-2025-32433","title":"Mdusmandasthaheer/CVE-2025-32433","date":"2025-08-28","url":"https://github.com/Mdusmandasthaheer/CVE-2025-32433"},{"source":"pocgithub","id":"dollarboysushil/CVE-2025-32433-Erlang-OTP-SSH-Unauthenticated-RCE","title":"dollarboysushil/CVE-2025-32433-Erlang-OTP-SSH-Unauthenticated-RCE","date":"2025-09-07","url":"https://github.com/dollarboysushil/CVE-2025-32433-Erlang-OTP-SSH-Unauthenticated-RCE"},{"source":"pocgithub","id":"iteride/CVE-2025-32433","title":"iteride/CVE-2025-32433","date":"2025-09-18","url":"https://github.com/iteride/CVE-2025-32433"},{"source":"pocgithub","id":"mirmeweu/cve-2025-32433","title":"mirmeweu/cve-2025-32433","date":"2025-09-24","url":"https://github.com/mirmeweu/cve-2025-32433"}],"exploits_more":18,"fixes":[{"ecosystem":"Alpine:v3.21","package":"erlang","fixed_in":["26.2.5.11-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"erlang","fixed_in":["26.2.5.11-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"erlang","fixed_in":["25.3.2.20-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"erlang","fixed_in":["1:25.2.3+dfsg-1+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"erlang","fixed_in":["1:27.3.3+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"erlang","fixed_in":["1:27.3.3+dfsg-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"erlang","fixed_in":["21.3.3-6.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"erlang","fixed_in":["23.3.4.9-6.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"erlang","fixed_in":["23.3.4.9-6.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"erlang","fixed_in":["25.3.2.6-6.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"erlang","fixed_in":["25.3.2.6-6.oe2403sp1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"erlang","fixed_in":["23.3.4.19-150300.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"erlang","fixed_in":["23.3.4.19-150300.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"erlang","fixed_in":["23.3.4.19-150300.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"erlang","fixed_in":["23.3.4.19-150300.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"erlang","fixed_in":["23.3.4.19-150300.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"erlang","fixed_in":["23.3.4.19-150300.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"erlang","fixed_in":["23.3.4.19-150300.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"erlang","fixed_in":["23.3.4.19-150300.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"erlang","fixed_in":["23.3.4.19-150300.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"erlang","fixed_in":["23.3.4.19-150300.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"erlang","fixed_in":["23.3.4.19-150300.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"erlang","fixed_in":["23.3.4.19-150300.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"erlang","fixed_in":["23.3.4.19-150300.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"erlang","fixed_in":["23.3.4.19-150300.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"erlang","fixed_in":["23.3.4.19-150300.3.20.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"erlang","fixed_in":["23.3.4.19-150300.3.20.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"erlang","fixed_in":["1:18.3-dfsg-1ubuntu3.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"erlang","fixed_in":["1:20.2.2+dfsg-1ubuntu2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"erlang","fixed_in":["1:22.2.7+dfsg-1ubuntu0.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"erlang","fixed_in":["1:24.2.1+dfsg-1ubuntu0.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"erlang","fixed_in":["1:25.3.2.8+dfsg-1ubuntu4.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.04","package":"erlang","fixed_in":["1:27.3+dfsg-1ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.21","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.2.5.11-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.2.5.11-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.3.2.20-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.2.3+dfsg-1+deb12u1"}]}],"versions":["1:25.2.3+dfsg-1"]},{"source":"osv","ecosystem":"Debian:13","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.3.3+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.3.3+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.2.6+dfsg-1+deb11u2"}]}],"versions":["1:23.2.6+dfsg-1","1:23.2.6+dfsg-1+deb11u1"],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.2.3+dfsg-1+deb12u1"}]}],"versions":["1:25.2.3+dfsg-1"],"bundled":4},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.3.3-6.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3.4.9-6.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3.4.9-6.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.3.2.6-6.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.3.2.6-6.oe2403sp1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"erlang26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.2.1-150300.7.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"erlang26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.2.1-150300.7.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3.4.19-150300.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3.4.19-150300.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3.4.19-150300.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3.4.19-150300.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3.4.19-150300.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3.4.19-150300.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3.4.19-150300.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3.4.19-150300.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3.4.19-150300.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3.4.19-150300.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3.4.19-150300.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3.4.19-150300.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3.4.19-150300.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3.4.19-150300.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3.4.19-150300.3.20.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.3.4.19-150300.3.20.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.3-dfsg-1ubuntu3.1+esm1"}]}],"versions":["1:18.0-dfsg-1ubuntu1","1:18.0-dfsg-1ubuntu2","1:18.2-dfsg-2ubuntu1","1:18.3-dfsg-1ubuntu1","1:18.3-dfsg-1ubuntu2","1:18.3-dfsg-1ubuntu3","1:18.3-dfsg-1ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.2.2+dfsg-1ubuntu2+esm1"}]}],"versions":["1:20.0.4+dfsg-1ubuntu1","1:20.1.2+dfsg-1ubuntu1","1:20.1.3+dfsg-1ubuntu1","1:20.1.4+dfsg-1ubuntu1","1:20.1.5+dfsg-1ubuntu1","1:20.1.6+dfsg-1ubuntu1","1:20.1.7+dfsg-1ubuntu1","1:20.2.1+dfsg-1ubuntu1","1:20.2.2+dfsg-1ubuntu1","1:20.2.2+dfsg-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:22.2.7+dfsg-1ubuntu0.5"}]}],"versions":["1:22.0.7+dfsg-1build1","1:22.2+dfsg-1","1:22.2.1+dfsg-1","1:22.2.2+dfsg-1","1:22.2.3+dfsg-1","1:22.2.3+dfsg-2","1:22.2.4+dfsg-1","1:22.2.7+dfsg-1","1:22.2.7+dfsg-1ubuntu0.2","1:22.2.7+dfsg-1ubuntu0.3","1:22.2.7+dfsg-1ubuntu0.4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.2.1+dfsg-1ubuntu0.4"}]}],"versions":["1:23.2.6+dfsg-1build1","1:24.1.1+dfsg-1","1:24.1.4+dfsg-1","1:24.1.5+dfsg-1","1:24.1.5+dfsg-1ubuntu1","1:24.2+dfsg-1","1:24.2.1+dfsg-1","1:24.2.1+dfsg-1ubuntu0.1","1:24.2.1+dfsg-1ubuntu0.2","1:24.2.1+dfsg-1ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.3.2.8+dfsg-1ubuntu4.3"}]}],"versions":["1:25.2.3+dfsg-1","1:25.3.2.8+dfsg-1","1:25.3.2.8+dfsg-1ubuntu1","1:25.3.2.8+dfsg-1ubuntu3","1:25.3.2.8+dfsg-1ubuntu4","1:25.3.2.8+dfsg-1ubuntu4.1","1:25.3.2.8+dfsg-1ubuntu4.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:22.2.7+dfsg-1ubuntu0.5"}]}],"versions":["1:22.0.7+dfsg-1build1","1:22.2+dfsg-1","1:22.2.1+dfsg-1","1:22.2.2+dfsg-1","1:22.2.3+dfsg-1","1:22.2.3+dfsg-2","1:22.2.4+dfsg-1","1:22.2.7+dfsg-1","1:22.2.7+dfsg-1ubuntu0.2","1:22.2.7+dfsg-1ubuntu0.3","1:22.2.7+dfsg-1ubuntu0.4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.2.1+dfsg-1ubuntu0.4"}]}],"versions":["1:23.2.6+dfsg-1build1","1:24.1.1+dfsg-1","1:24.1.4+dfsg-1","1:24.1.5+dfsg-1","1:24.1.5+dfsg-1ubuntu1","1:24.2+dfsg-1","1:24.2.1+dfsg-1","1:24.2.1+dfsg-1ubuntu0.1","1:24.2.1+dfsg-1ubuntu0.2","1:24.2.1+dfsg-1ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.3.2.8+dfsg-1ubuntu4.3"}]}],"versions":["1:25.2.3+dfsg-1","1:25.3.2.8+dfsg-1","1:25.3.2.8+dfsg-1ubuntu1","1:25.3.2.8+dfsg-1ubuntu3","1:25.3.2.8+dfsg-1ubuntu4","1:25.3.2.8+dfsg-1ubuntu4.1","1:25.3.2.8+dfsg-1ubuntu4.2"]},{"source":"osv","ecosystem":"Ubuntu:25.04","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.3+dfsg-1ubuntu1.1"}]}],"versions":["1:25.3.2.12+dfsg-1ubuntu2","1:27.2+dfsg-2","1:27.2.1+dfsg-1","1:27.2.1+dfsg-2","1:27.2.2+dfsg-1","1:27.2.3+dfsg-1","1:27.2.4+dfsg-1","1:27.3+dfsg-1","1:27.3+dfsg-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.3-dfsg-1ubuntu3.1+esm1"}]}],"versions":["1:18.0-dfsg-1ubuntu1","1:18.0-dfsg-1ubuntu2","1:18.2-dfsg-2ubuntu1","1:18.3-dfsg-1ubuntu1","1:18.3-dfsg-1ubuntu2","1:18.3-dfsg-1ubuntu3","1:18.3-dfsg-1ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.2.2+dfsg-1ubuntu2+esm1"}]}],"versions":["1:20.0.4+dfsg-1ubuntu1","1:20.1.2+dfsg-1ubuntu1","1:20.1.3+dfsg-1ubuntu1","1:20.1.4+dfsg-1ubuntu1","1:20.1.5+dfsg-1ubuntu1","1:20.1.6+dfsg-1ubuntu1","1:20.1.7+dfsg-1ubuntu1","1:20.2.1+dfsg-1ubuntu1","1:20.2.2+dfsg-1ubuntu1","1:20.2.2+dfsg-1ubuntu2"]}],"products":[{"vendor":"cisco","product":"cloud_native_broadband_network_gateway"},{"vendor":"cisco","product":"confd_basic"},{"vendor":"cisco","product":"enterprise_nfv_infrastructure_software"},{"vendor":"cisco","product":"inode_manager"},{"vendor":"cisco","product":"ncs_2000_shelf_virtualization_orchestrator_firmware"},{"vendor":"cisco","product":"network_services_orchestrator"},{"vendor":"cisco","product":"optical_site_manager"},{"vendor":"cisco","product":"rv160_firmware"},{"vendor":"cisco","product":"rv160w_firmware"},{"vendor":"cisco","product":"rv260_firmware"},{"vendor":"cisco","product":"rv260p_firmware"},{"vendor":"cisco","product":"rv260w_firmware"},{"vendor":"cisco","product":"rv340_firmware"},{"vendor":"cisco","product":"rv340w_firmware"},{"vendor":"cisco","product":"rv345_firmware"},{"vendor":"cisco","product":"rv345p_firmware"},{"vendor":"cisco","product":"smart_phy"},{"vendor":"cisco","product":"staros"},{"vendor":"cisco","product":"ultra_cloud_core"},{"vendor":"cisco","product":"ultra_packet_core"},{"vendor":"cisco","product":"ultra_services_platform"},{"vendor":"debian","product":"debian_linux"},{"vendor":"erlang","product":"erlang/otp"},{"vendor":"erlang","product":"erlang\\/otp"},{"vendor":"erlang","product":"otp"}],"references":[{"url":"https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2","tags":["x_refsource_CONFIRM","Vendor Advisory","advisory","report"]},{"url":"https://github.com/erlang/otp/commit/0fcd9c56524b28615e8ece65fc0c3f66ef6e4c12","tags":["x_refsource_MISC","Patch","fix"]},{"url":"https://github.com/erlang/otp/commit/6eef04130afc8b0ccb63c9a0d8650209cf54892f","tags":["x_refsource_MISC","Patch","fix"]},{"url":"https://github.com/erlang/otp/commit/b1924d37fd83c070055beb115d5d6a6a9490b891","tags":["x_refsource_MISC","Patch","fix"]},{"url":"http://www.openwall.com/lists/oss-security/2025/04/16/2","tags":["Mailing List","web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/04/18/1","tags":["Mailing List","web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/04/18/2","tags":["Mailing List","web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/04/18/6","tags":["Mailing List","web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/04/19/1","tags":["Mailing List","web"]},{"url":"https://security.netapp.com/advisory/ntap-20250425-0001/","tags":["Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/04/msg00028.html","tags":["Third Party Advisory","web"]},{"url":"https://github.com/ProDefense/CVE-2025-32433/blob/main/CVE-2025-32433.py","tags":["exploit","Exploit","evidence"]},{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-erlang-otp-ssh-xyZZy","tags":["vendor-advisory","Third Party Advisory","advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-32433","tags":["government-resource","US Government Resource","web"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-32433","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32433","tags":["web","advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/32xxx/CVE-2025-32433.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-32433","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1461","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251356-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1240390","tags":["report"]},{"url":"https://bugzilla.suse.com/1241300","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-30211","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32433","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251357-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-32433","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32433","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7443-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7443-2","tags":["advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7443-3","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-32433","title":"Erlang/OTP SSH Vulnerable to Pre-Authentication RCE","description":"Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.","status":"published","published":"2025-04-16T21:34:37.457Z","modified":"2026-02-26T18:28:12.084Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:32:46.109993Z"}],"euvd":[{"id":"EUVD-2025-11793","description":"Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.","status":"published","published":"2025-04-16T21:34:37Z","modified":"2026-02-26T18:28:12Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"exploited_since":"2025-06-09","updated_at":"2026-11-02T19:48:17.446722Z"}],"kev":[{"id":"CVE-2025-32433","title":"Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability","description":"Erlang Erlang/OTP SSH server contains a missing authentication for critical function vulnerability. This could allow an attacker to execute arbitrary commands without valid credentials, potentially leading to unauthenticated remote code execution (RCE). By exploiting a flaw in how SSH protocol messages are handled, a malicious actor could gain unauthorized access to affected systems. This vulnerability could affect various products that implement Erlang/OTP SSH server, including—but not limited to—Cisco, NetApp, and SUSE.","cwes":["CWE-306"],"kev":{"date_added":"2025-06-09","due_date":"2025-06-30","required_action":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:15.999436Z"}],"nvd":[{"id":"CVE-2025-32433","description":"Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.","status":"published","published":"2025-04-16T22:15:14.373Z","modified":"2026-06-17T09:11:59.137Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:11:00.810682Z"}],"osv":[{"id":"ALPINE-CVE-2025-32433","description":"Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.","status":"published","published":"2025-04-16T22:15:14.373Z","modified":"2026-11-03T06:32:15.119576118Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T07:17:57.723967Z"},{"id":"CVE-2025-32433","title":"Erlang/OTP SSH Vulnerable to Pre-Authentication RCE","description":"Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.","status":"published","published":"2025-04-16T21:34:37.457Z","modified":"2026-10-28T02:30:36.534194301Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T15:44:48.02508Z"},{"id":"DEBIAN-CVE-2025-32433","description":"Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.","status":"published","published":"2025-04-16T22:15:14.373Z","modified":"2026-09-01T20:05:45.930148871Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:45.870237Z"},{"id":"OESA-2025-1461","title":"erlang security update","description":"Security Fix(es):\n\nErlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.(CVE-2025-32433)","status":"published","published":"2025-04-29T11:08:33Z","modified":"2026-08-18T01:17:57.856910253Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"UBUNTU-CVE-2025-32433","description":"Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.","status":"published","published":"2025-04-16T00:00:00Z","modified":"2026-04-22T15:41:44.080068Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:55:28.829873Z"},{"id":"AZL-60441","title":"CVE-2025-32433 affecting package erlang for versions less than 26.2.5.11-1","description":"Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.","status":"published","published":"2025-04-16T22:15:14Z","modified":"2026-04-21T04:48:27.445119Z","updated_at":"2026-11-02T15:28:07.517393Z"},{"id":"AZL-60583","title":"CVE-2025-32433 affecting package erlang for versions less than 25.3.2.20-1","description":"Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.","status":"published","published":"2025-04-16T22:15:14Z","modified":"2026-04-21T04:37:28.035189Z","updated_at":"2026-11-02T15:28:07.517393Z"},{"id":"DLA-4132-1","title":"erlang - security update","status":"published","published":"2025-04-21T00:00:00Z","modified":"2026-03-09T01:20:49.015648Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-5906-1","title":"erlang - security update","status":"published","published":"2025-04-20T00:00:00Z","modified":"2026-03-09T02:10:15.909755Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"SUSE-SU-2025:1356-1","title":"Security update for erlang26","description":"This update for erlang26 fixes the following issues:\n\n - CVE-2025-30211: Fixed KEX init error results with excessive memory usage (bsc#1240390)\n - CVE-2025-32433: Fixed unauthenticated remote code execution in Erlang/OTP SSH (bsc#1241300) \n","status":"published","published":"2025-04-22T09:29:26Z","modified":"2026-02-04T04:20:03.376124Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:1357-1","title":"Security update for erlang","description":"This update for erlang fixes the following issues:\n\n  - CVE-2025-32433: Fixed unauthenticated remote code execution in Erlang/OTP SSH (bsc#1241300) \n","status":"published","published":"2025-04-22T09:30:11Z","modified":"2026-02-04T04:00:15.86696Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"USN-7443-1","title":"erlang vulnerability","description":"Fabian Bäumer, Marcel Maehren, Marcus Brinkmann, and Jörg Schwenk\ndiscovered that Erlang OTP’s SSH module incorrect handled authentication. A\nremote attacker could use this issue to execute arbitrary commands without\nauthentication, possibly leading to a system compromise.\n","status":"published","published":"2025-04-17T14:04:44Z","modified":"2026-04-22T10:57:29.547147Z","updated_at":"2026-11-02T16:58:19.988474Z"},{"id":"USN-7443-2","title":"erlang vulnerability","description":"USN-7443-1 fixed a vulnerability in Erlang. This update provides the\ncorresponding update for Ubuntu 25.04.\n\nOriginal advisory details:\n\n Fabian Bäumer, Marcel Maehren, Marcus Brinkmann, and Jörg Schwenk\n discovered that Erlang OTP’s SSH module incorrect handled authentication.\n A remote attacker could use this issue to execute arbitrary commands\n without authentication, possibly leading to a system compromise.\n","status":"published","published":"2025-04-23T11:35:02.39007Z","modified":"2026-02-04T04:03:35.232192Z","updated_at":"2026-11-02T16:58:19.988474Z"},{"id":"USN-7443-3","title":"erlang vulnerability","description":"USN-7443-1 fixed a vulnerability in Erlang. This update provides the\ncorresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.\n\nOriginal advisory details:\n\n Fabian Bäumer, Marcel Maehren, Marcus Brinkmann, and Jörg Schwenk\n discovered that Erlang OTP’s SSH module incorrect handled authentication. A\n remote attacker could use this issue to execute arbitrary commands without\n authentication, possibly leading to a system compromise.\n","status":"published","published":"2025-07-17T13:12:01Z","modified":"2026-06-25T13:32:30.403086332Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}