10

CVE-2025-32433: Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability

CVSS: 10.0v3.1CriticalKEVAnalyzed
AliasesSUSE-SU-2025:1357-1UBUNTU-CVE-2025-32433USN-7443-1
Published 16-04-2025Last modified 26-02-2026
Open JSON

Vulnerability summary

CVE-2025-32433 is a critical (CVSS 10.0) vulnerability in Erlang Erlang/OTP. It is known to be exploited: CISA lists it, first on 09-06-2025. EPSS estimates a 98.79% chance of exploitation in the next 30 days, higher than 99.9% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk
90/100
0100
Critical · default modelHow is this calculated?
CVSS score
10.0/10
010
Critical · v3.1 (CVE.org)
EPSS score
98.79%
0%100%
Critical · +0.03 pp in 30 days
KEVListedCISA
RansomwareNone recordedNo known use recorded
Public exploits2github, metasploit

Advisory lineage

Upstream 0 · Downstream 3 · Related 1
DLA-4132-1DSA-5906-1SUSE-SU-2025:1356-1

Timeline

  1. 16-04-2025
    PublishedVulnerability first disclosed.
  2. 09-06-2025
    Added to CISA KEVErlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability
  3. 30-06-2025
    CISA remediation dueApply mitigations per vendor instructions.
  4. 26-02-2026
    Last modifiedVulnerability information updated.

Description

Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

98.79%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

+0.03 pp

From 98.75% on 18-09-2026

18-09-202618-10-2026
EPSS score
98.79%

Known exploited

Compare KEV catalogs
CISA KEVListed
Added
09-06-2025
Federal due date
30-06-2025

CISA required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-erlang-otp-ssh-xyZZy nvd.nist.gov/vuln/detail/CVE-2025-32433

Public exploits

2 found
  • githubUnverified

    Cve 2025 32433

    Maturity: poc

  • MetasploitMetasploitremoteVerified

    Erlang OTP Pre-Auth RCE Scanner and Exploit

    exploit/linux/ssh/ssh_erlangotp_rce

    Maturity: weaponized

Weaknesses

CWE · root cause

Affected systems

Cisco21 products
Suse15 products
  • erlang&distro=SUSE Enterprise Storage 7.1< 23.3.4.19-150300.3.20.1
  • erlang&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS< 23.3.4.19-150300.3.20.1
  • erlang&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 23.3.4.19-150300.3.20.1
  • erlang&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 23.3.4.19-150300.3.20.1
  • erlang&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS< 23.3.4.19-150300.3.20.1
Debian2 products
  • erlang< 1:25.2.3+dfsg-1+deb12u1 | < 1:27.3.3+dfsg-1
  • debian_linuxEOL11.0
Erlang2 products
  • erlang\/otp< 25.3.2.20 | ≥ 26.0, < 26.2.5.11 | ≥ 27.0, < 27.3.3
  • otp≥ OTP-27.0-rc1, < OTP-27.3.3 | ≥ OTP-26.0-rc1, < OTP-26.2.5.11 | < OTP-25.3.2.20
Opensuse1 product
  • erlang&distro=openSUSE Leap 15.6< 23.3.4.19-150300.3.20.1
Ubuntu1 product
  • erlang< 1:22.2.7+dfsg-1ubuntu0.5 | < 1:24.2.1+dfsg-1ubuntu0.4 | < 1:25.3.2.8+dfsg-1ubuntu4.3 | < 1:27.3+dfsg-1ubuntu1.1 | < 1:18.3-dfsg-1ubuntu3.1+esm1 | < 1:20.2.2+dfsg-1ubuntu2+esm1

6 vendors · 42 products

References

25 links
Show all 25 references