Skip to main content

Erlang Otp CVE-2025-32433

CRITICAL
Missing Authentication for Critical Function (CWE-306)
2025-04-16 security-advisories@github.com
RCE Authentication Bypass Erlang Otp Confd Basic Network Services Orchestrator Cloud Native Broadband Network Gateway Inode Manager Smart Phy Ultra Packet Core Ultra Services Platform Staros Optical Site Manager Ncs 2000 Shelf Virtualization Orchestrator Firmware Enterprise Nfv Infrastructure Software Ultra Cloud Core Rv160W Firmware Rv260 Firmware Rv160 Firmware Rv260P Firmware Rv260W Firmware Rv340 Firmware Rv340W Firmware Rv345 Firmware Rv345P Firmware Debian Linux Suse
10.0
CVSS 3.1 · GitHub Advisory
Share

Severity by source

GitHub Advisory PRIMARY
10.0 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
SUSE
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Primary rating from GitHub Advisory.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

5
Analysis Generated
Mar 28, 2026 - 18:37 vuln.today
Patch released
Mar 28, 2026 - 18:37 nvd
Patch available
Added to CISA KEV
Nov 04, 2025 - 14:49 cisa
CISA KEV
PoC Detected
Nov 04, 2025 - 14:49 vuln.today
Public exploit code
CVE Published
Apr 16, 2025 - 22:15 nvd
CRITICAL 10.0

DescriptionGitHub Advisory

Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.

AnalysisAI

Erlang/OTP SSH server allows unauthenticated remote code execution by exploiting a flaw in SSH protocol message handling, enabling unauthorized system access with CVSS 10.0.

Technical ContextAI

The CWE-306 flaw in SSH protocol message handling allows an attacker to send SSH messages before authentication completes. The SSH server processes these pre-auth messages in a way that enables arbitrary Erlang code execution, which translates to OS command execution.

RemediationAI

Update Erlang/OTP immediately. Identify all services using Erlang SSH (RabbitMQ, CouchDB, ejabberd, etc.). Restrict SSH port access. Monitor for exploitation attempts.

Vendor StatusVendor

SUSE

Severity: Critical
Product Status
SUSE Enterprise Storage 7.1 Fixed
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS Fixed
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS Fixed
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS Fixed
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS Fixed

Share

CVE-2025-32433 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy