Description
Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.
CISA Known Exploited Vulnerability
Date added 2025-06-09 | Due date 2025-06-30
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Problem types
CWE-306: Missing Authentication for Critical Function
Product status
>= OTP-26.0-rc1, < OTP-26.2.5.11
< OTP-25.3.2.20
References
www.openwall.com/lists/oss-security/2025/04/16/2
www.openwall.com/lists/oss-security/2025/04/18/1
www.openwall.com/lists/oss-security/2025/04/18/2
www.openwall.com/lists/oss-security/2025/04/18/6
www.openwall.com/lists/oss-security/2025/04/19/1
security.netapp.com/advisory/ntap-20250425-0001/
lists.debian.org/debian-lts-announce/2025/04/msg00028.html
github.com/...nse/CVE-2025-32433/blob/main/CVE-2025-32433.py
sec.cloudapps.cisco.com/...ory/cisco-sa-erlang-otp-ssh-xyZZy
www.cisa.gov/...erabilities-catalog?field_cve=CVE-2025-32433
github.com/...ng/otp/security/advisories/GHSA-37cp-fgq5-7wc2
github.com/...ommit/0fcd9c56524b28615e8ece65fc0c3f66ef6e4c12
github.com/...ommit/6eef04130afc8b0ccb63c9a0d8650209cf54892f
github.com/...ommit/b1924d37fd83c070055beb115d5d6a6a9490b891