// For flags

CVE-2025-32433

Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability

Severity Score

10.0
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

25
*Multiple Sources

Exploited in Wild

Yes
*KEV

Decision

Act
*SSVC
Descriptions

Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.

USN-7443-1 fixed a vulnerability in Erlang. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Fabian Bäumer, Marcel Maehren, Marcus Brinkmann, and Joerg Schwenk discovered that Erlang OTP’s SSH module incorrect handled authentication. A remote attacker could use this issue to execute arbitrary commands without authentication, possibly leading to a system compromise.

Erlang Erlang/OTP SSH server contains a missing authentication for critical function vulnerability. This could allow an attacker to execute arbitrary commands without valid credentials, potentially leading to unauthenticated remote code execution (RCE). By exploiting a flaw in how SSH protocol messages are handled, a malicious actor could gain unauthorized access to affected systems. This vulnerability could affect various products that implement Erlang/OTP SSH server, including—but not limited to—Cisco, NetApp, and SUSE.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:Act
Exploitation
Active
Automatable
Yes
Tech. Impact
Total
* Organization's Worst-case Scenario
Timeline
  • 2025-04-08 CVE Reserved
  • 2025-04-16 CVE Published
  • 2025-04-18 First Exploit
  • 2025-06-09 Exploited in Wild
  • 2025-06-30 KEV Due Date
  • 2025-08-19 EPSS Updated
  • 2025-08-20 CVE Updated
CWE
  • CWE-306: Missing Authentication for Critical Function
CAPEC
References (32)
URL Tag Source
https://github.com/erlang/otp/commit/0fcd9c56524b28615e8ece65fc0c3f66ef6e4c12 X_refsource_misc
https://github.com/erlang/otp/commit/6eef04130afc8b0ccb63c9a0d8650209cf54892f X_refsource_misc
https://github.com/erlang/otp/commit/b1924d37fd83c070055beb115d5d6a6a9490b891 X_refsource_misc
https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2 X_refsource_confirm
http://www.openwall.com/lists/oss-security/2025/04/16/2
https://x.com/Horizon3Attack/status/1912945580902334793
https://platformsecurity.com/blog/CVE-2025-32433-poc
URL Date SRC
https://packetstorm.news/files/id/190739 2025-05-02
https://github.com/ProDefense/CVE-2025-32433 2025-04-25
https://github.com/ekomsSavior/POC_CVE-2025-32433 2025-04-19
https://github.com/darses/CVE-2025-32433 2025-04-19
https://github.com/LemieOne/CVE-2025-32433 2025-04-18
https://github.com/teamtopkarl/CVE-2025-32433 2025-04-19
https://github.com/m0usem0use/erl_mouse 2025-04-19
https://github.com/exa-offsec/ssh_erlangotp_rce 2025-04-24
https://github.com/omer-efe-curkus/CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC 2025-04-24
https://github.com/0xPThree/cve-2025-32433 2025-04-21
https://github.com/meloppeitreet/CVE-2025-32433-Remote-Shell 2025-04-21
https://github.com/tobiasGuta/Erlang-OTP-CVE-2025-32433 2025-04-23
https://github.com/ps-interactive/lab_CVE-2025-32433 2025-04-24
https://github.com/rizky412/CVE-2025-32433 2025-04-25
https://github.com/0x7556/CVE-2025-32433 2025-04-25
https://github.com/becrevex/CVE-2025-32433 2025-04-25
https://github.com/MrDreamReal/CVE-2025-32433 2025-04-27
https://github.com/Know56/CVE-2025-32433 2025-04-28
https://github.com/abrewer251/CVE-2025-32433_Erlang-OTP 2025-04-29
https://github.com/ODST-Forge/CVE-2025-32433_PoC 2025-04-29
https://github.com/C9b3rD3vi1/Erlang-OTP-SSH-CVE-2025-32433 2025-04-29
https://github.com/bilalz5-github/Erlang-OTP-SSH-CVE-2025-32433 2025-05-02
https://github.com/vigilante-1337/CVE-2025-32433 2025-05-03
https://github.com/B1ack4sh/Blackash-CVE-2025-32433 2025-06-09
https://github.com/Yuri08loveElaina/CVE-2025-32433-Erlang-OTP-SSH-Pre-Auth-RCE-exploit 2025-06-15
URL Date SRC
URL Date SRC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Erlang
Search vendor "Erlang"
 Otp
Search vendor "Erlang" for product "Otp"
 <
Search vendor "Erlang" for product "Otp" and version " < "
en
Affected
Erlang
Search vendor "Erlang"
 Otp
Search vendor "Erlang" for product "Otp"
 <
Search vendor "Erlang" for product "Otp" and version " < "
en
Affected
Erlang
Search vendor "Erlang"
 Otp
Search vendor "Erlang" for product "Otp"
 <
Search vendor "Erlang" for product "Otp" and version " < "
en
Affected