CVE-2025-32433

Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function

10.0 CRITICALActively exploited (CISA KEV)Public exploitEPSS 98.8%

Published16 Apr 2025
Added to CISA KEV9 Jun 2025
Remediation due30 Jun 2025

Erlang Erlang/OTP SSH server contains a missing authentication for critical function vulnerability. This could allow an attacker to execute arbitrary commands without valid credentials, potentially leading to unauthenticated remote code execution (RCE). By exploiting a flaw in how SSH protocol messages are handled, a malicious actor could gain unauthorized access to affected systems. This vulnerability could affect various products that implement Erlang/OTP SSH server, including—but not limited to—Cisco, NetApp, and SUSE.

Added to KEV: 9 Jun 2025Federal remediation due: 30 Jun 2025

Description

Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.

CVSS 3.1 breakdown

Attack vectorNetwork

Attack complexityLow

Privileges requiredNone

User interactionNone

ScopeChanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected products

Cisco Cloud Native Broadband Network Gateway< 2025.03.1

Cisco Confd Basic≥ 8.0.18 < 8.1.16.2 · ≥ 8.2 < 8.2.11.1 · ≥ 8.3 < 8.3.8.1 · ≥ 8.4 < 8.4.4.1

Cisco Enterprise Nfv Infrastructure Software< 4.18

Cisco Inode Managerall versions

Cisco Network Services Orchestrator≥ 5.8 < 6.1.16.2 · ≥ 6.2 < 6.2.11.1 · ≥ 6.3 < 6.3.8.1 · ≥ 6.4 < 6.4.1.1

Cisco Optical Site Manager< 25.2.1

Cisco Smart Phy< 25.2

Cisco Ultra Cloud Core< 2025.03.1

Cisco Ultra Packet Core< 2025.03

Cisco Ultra Services Platformall versions

Erlang Erlang/otp≥ 26.0 < 26.2.5.11 · ≥ 27.0 < 27.3.3 · < 25.3.2.20

Cisco Ncs 2000 Shelf Virtualization Orchestrator Firmware< 25.1.1

Cisco Rv160 Firmwareall versions

Cisco Rv160w Firmwareall versions

Cisco Rv260 Firmwareall versions

Cisco Rv260p Firmwareall versions

Cisco Rv260w Firmwareall versions

Cisco Rv340 Firmwareall versions

Cisco Rv340w Firmwareall versions

Cisco Rv345 Firmwareall versions

Cisco Rv345p Firmwareall versions

Cisco Staros< 2025.03

Debian Linux11.0

Remediation

Fixed in

Cisco Cloud Native Broadband Network Gateway≥ 2025.03.1

Cisco Confd Basic≥ 8.1.16.2

Cisco Enterprise Nfv Infrastructure Software≥ 4.18

Cisco Network Services Orchestrator≥ 6.1.16.2

Cisco Optical Site Manager≥ 25.2.1

Cisco Smart Phy≥ 25.2

Cisco Ultra Cloud Core≥ 2025.03.1

Cisco Ultra Packet Core≥ 2025.03

Erlang Erlang/otp≥ 26.2.5.11

Cisco Ncs 2000 Shelf Virtualization Orchestrator Firmware≥ 25.1.1

Patch & vendor advisories

References

https://github.com/erlang/otp/commit/0fcd9c56524b28615e8ece65fc0c3f66ef6e4c12Patch
https://github.com/erlang/otp/commit/6eef04130afc8b0ccb63c9a0d8650209cf54892fPatch
https://github.com/erlang/otp/commit/b1924d37fd83c070055beb115d5d6a6a9490b891Patch
https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2Vendor Advisory
https://github.com/ProDefense/CVE-2025-32433/blob/main/CVE-2025-32433.pyExploit
https://lists.debian.org/debian-lts-announce/2025/04/msg00028.htmlThird Party Advisory
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-erlang-otp-ssh-xyZZyThird Party Advisory
https://security.netapp.com/advisory/ntap-20250425-0001/Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-32433US Government Resource
http://www.openwall.com/lists/oss-security/2025/04/16/2Mailing List

and 4 more references

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

Frequently asked

Is CVE-2025-32433 being actively exploited?

Yes. CVE-2025-32433 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added 9 Jun 2025.

How severe is CVE-2025-32433?

CVE-2025-32433 has a CVSS 3.1 base score of 10.0, rated critical. EPSS estimates a 98.8% probability of exploitation.

Which products are affected by CVE-2025-32433?

Affected products include Cisco Cloud Native Broadband Network Gateway, Cisco Confd Basic, Cisco Enterprise Nfv Infrastructure Software, Cisco Inode Manager, Cisco Network Services Orchestrator, and 18 more.

How do I fix CVE-2025-32433?

Upgrade affected software to a fixed version, for example Cisco Cloud Native Broadband Network Gateway 2025.03.1, Cisco Confd Basic 8.1.16.2, Cisco Enterprise Nfv Infrastructure Software 4.18 or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2025-32433 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. Because it is on the CISA KEV list, Secuno flags any affected asset as top-priority automatically. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation works Book a demo

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.