Missing Authentication for Critical Function in otp - CVE-2025-32433

Vulnerability identifier: #VU107594

CSH Severity: Critical

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-32433

CWE-ID: CWE-306

Exploitation vector: Remote access

Exploit availability: The vulnerability is being exploited in the wild

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to missing authentication in Erlang/OTP SSH server. A remote non-authenticated attacker can send specially crafted messages to the server and execute arbitrary code on the system.

otp
ConfD
ConfD Basic
APEX Cloud Platform for Microsoft Azure
Cisco Network Services Orchestrator (NSO)
Debian Linux
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Manager Server
SUSE Enterprise Storage
Server Applications Module
openSUSE Leap
Ubuntu
openEuler
PowerVC
Tenable Identity Exposure (formerly Tenable.ad)
erlang (Ubuntu package)
erlang-jinterface
erlang-kernel
erlang-inets
erlang-hipe
erlang-ftp
erlang-examples
erlang-eunit
erlang-et
erlang-erts
erlang-erl_interface
erlang-erl_docgen
erlang-eldap
erlang-edoc
erlang-diameter
erlang-dialyzer
erlang-debugsource
erlang-debuginfo
erlang-debugger
erlang-crypto
erlang-compiler
erlang-common_test
erlang-asn1
erlang
erlang-megaco
erlang-xmerl
erlang-wx
erlang-tools
erlang-tftp
erlang-syntax_tools
erlang-stdlib
erlang-ssl
erlang-ssh
erlang-snmp
erlang-sasl
erlang-runtime_tools
erlang-reltool
erlang-public_key
erlang-parsetools
erlang-otp_mibs
erlang-os_mon
erlang-odbc
erlang-observer
erlang-mnesia
erlang-ssh (Ubuntu package)
erlang-et-src
erlang-debugger-src
erlang-dialyzer-debuginfo
erlang-diameter-src
erlang-epmd
erlang-dialyzer-src
erlang-doc
erlang-wx-src
erlang-jinterface-src
erlang-wx-debuginfo
erlang-epmd-debuginfo
erlang-src
erlang-observer-src
erlang-reltool-src
erlang (Debian package)
erlang26-dialyzer-debuginfo
erlang26-reltool
erlang26-observer-src
erlang26-debugger
erlang26-jinterface
erlang26-diameter-src
erlang26-src
erlang26-diameter
erlang26-jinterface-src
erlang26-doc
erlang26-reltool-src
erlang26-wx-src
erlang26-epmd-debuginfo
erlang26-dialyzer
erlang26-observer
erlang26-debuginfo
erlang26-dialyzer-src
erlang26-wx-debuginfo
erlang26-debugger-src
erlang26-debugsource
erlang26-et
erlang26-et-src
erlang26
erlang26-wx
erlang26-epmd

Install updates from vendor's website.

otp - addressed in versions 25.3.2.20, 26.2.5.11, 27.3.3
Tenable Identity Exposure (formerly Tenable.ad) - update to 3.77.11
APEX Cloud Platform for Microsoft Azure - update to 01.05.01.00
erlang (Ubuntu package) - addressed in versions 1:18.3-dfsg-1ubuntu3.1+esm1, 1:20.2.2+dfsg-1ubuntu2+esm1, 1:22.2.7+dfsg-1ubuntu0.5, 1:24.2.1+dfsg-1ubuntu0.4, 1:25.3.2.8+dfsg-1ubuntu4.3, 1:25.3.2.12+dfsg-1ubuntu2.3, 1:27.3+dfsg-1ubuntu1.1
erlang-jinterface - update to 21.3.3-6
erlang-kernel - update to 21.3.3-6
erlang-inets - update to 21.3.3-6
erlang-hipe - update to 21.3.3-6
erlang-ftp - update to 21.3.3-6
erlang-examples - update to 21.3.3-6
erlang-eunit - update to 21.3.3-6
erlang-et - update to 21.3.3-6
erlang-erts - update to 21.3.3-6
erlang-erl_interface - update to 21.3.3-6
erlang-erl_docgen - update to 21.3.3-6
erlang-eldap - update to 21.3.3-6
erlang-edoc - update to 21.3.3-6
erlang-diameter - update to 21.3.3-6
erlang-dialyzer - update to 21.3.3-6
erlang-debugsource - update to 21.3.3-6
erlang-debuginfo - update to 21.3.3-6
erlang-debugger - update to 21.3.3-6
erlang-crypto - update to 21.3.3-6
erlang-compiler - update to 21.3.3-6
erlang-common_test - update to 21.3.3-6
erlang-asn1 - update to 21.3.3-6
erlang - update to 21.3.3-6
erlang-megaco - update to 21.3.3-6
erlang-xmerl - update to 21.3.3-6
erlang-wx - update to 21.3.3-6
erlang-tools - update to 21.3.3-6
erlang-tftp - update to 21.3.3-6
erlang-syntax_tools - update to 21.3.3-6
erlang-stdlib - update to 21.3.3-6
erlang-ssl - update to 21.3.3-6
erlang-ssh - update to 21.3.3-6
erlang-snmp - update to 21.3.3-6
erlang-sasl - update to 21.3.3-6
erlang-runtime_tools - update to 21.3.3-6
erlang-reltool - update to 21.3.3-6
erlang-public_key - update to 21.3.3-6
erlang-parsetools - update to 21.3.3-6
erlang-otp_mibs - update to 21.3.3-6
erlang-os_mon - update to 21.3.3-6
erlang-odbc - update to 21.3.3-6
erlang-observer - update to 21.3.3-6
erlang-mnesia - update to 21.3.3-6
erlang-ssh (Ubuntu package) - addressed in versions 1:22.2.7+dfsg-1ubuntu0.5, 1:24.2.1+dfsg-1ubuntu0.4, 1:25.3.2.8+dfsg-1ubuntu4.3, 1:25.3.2.12+dfsg-1ubuntu2.3, 1:27.3+dfsg-1ubuntu1.1
erlang-et-src - update to 23.3.4.19-150300.3.20.1
erlang-et - update to 23.3.4.19-150300.3.20.1
erlang-jinterface - update to 23.3.4.19-150300.3.20.1
erlang-debugger-src - update to 23.3.4.19-150300.3.20.1
erlang-dialyzer-debuginfo - update to 23.3.4.19-150300.3.20.1
erlang-diameter-src - update to 23.3.4.19-150300.3.20.1
erlang-diameter - update to 23.3.4.19-150300.3.20.1
erlang-observer - update to 23.3.4.19-150300.3.20.1
erlang-epmd - update to 23.3.4.19-150300.3.20.1
erlang-wx - update to 23.3.4.19-150300.3.20.1
erlang-dialyzer-src - update to 23.3.4.19-150300.3.20.1
erlang-doc - update to 23.3.4.19-150300.3.20.1
erlang-debugsource - update to 23.3.4.19-150300.3.20.1
erlang-debuginfo - update to 23.3.4.19-150300.3.20.1
erlang-debugger - update to 23.3.4.19-150300.3.20.1
erlang-wx-src - update to 23.3.4.19-150300.3.20.1
erlang-jinterface-src - update to 23.3.4.19-150300.3.20.1
erlang-dialyzer - update to 23.3.4.19-150300.3.20.1
erlang - update to 23.3.4.19-150300.3.20.1
erlang-reltool - update to 23.3.4.19-150300.3.20.1
erlang-wx-debuginfo - update to 23.3.4.19-150300.3.20.1
erlang-epmd-debuginfo - update to 23.3.4.19-150300.3.20.1
erlang-src - update to 23.3.4.19-150300.3.20.1
erlang-observer-src - update to 23.3.4.19-150300.3.20.1
erlang-reltool-src - update to 23.3.4.19-150300.3.20.1
erlang (Debian package) - update to 1:25.2.3+dfsg-1+deb12u1
erlang26-dialyzer-debuginfo - update to 26.2.1-150300.7.11.1
erlang26-reltool - update to 26.2.1-150300.7.11.1
erlang26-observer-src - update to 26.2.1-150300.7.11.1
erlang26-debugger - update to 26.2.1-150300.7.11.1
erlang26-jinterface - update to 26.2.1-150300.7.11.1
erlang26-diameter-src - update to 26.2.1-150300.7.11.1
erlang26-src - update to 26.2.1-150300.7.11.1
erlang26-diameter - update to 26.2.1-150300.7.11.1
erlang26-jinterface-src - update to 26.2.1-150300.7.11.1
erlang26-doc - update to 26.2.1-150300.7.11.1
erlang26-reltool-src - update to 26.2.1-150300.7.11.1
erlang26-wx-src - update to 26.2.1-150300.7.11.1
erlang26-epmd-debuginfo - update to 26.2.1-150300.7.11.1
erlang26-dialyzer - update to 26.2.1-150300.7.11.1
erlang26-observer - update to 26.2.1-150300.7.11.1
erlang26-debuginfo - update to 26.2.1-150300.7.11.1
erlang26-dialyzer-src - update to 26.2.1-150300.7.11.1
erlang26-wx-debuginfo - update to 26.2.1-150300.7.11.1
erlang26-debugger-src - update to 26.2.1-150300.7.11.1
erlang26-debugsource - update to 26.2.1-150300.7.11.1
erlang26-et - update to 26.2.1-150300.7.11.1
erlang26-et-src - update to 26.2.1-150300.7.11.1
erlang26 - update to 26.2.1-150300.7.11.1
erlang26-wx - update to 26.2.1-150300.7.11.1
erlang26-epmd - update to 26.2.1-150300.7.11.1

• Exploit #12249 - cve-2025-32433_rce_exploit (This exploit script is designed to simplify exploitation of the Erlang/OTP SSH vulnerability CVE-2025-32433 in the TryHackMe lab environment.) (January 4, 2026)
• Exploit #12101 - CVE-2025-32433-exploit () (November 14, 2025)
• Exploit #11985 - cve-2025-32433 (September 24, 2025)
• Exploit #11891 - CVE-2025-32433 (August 29, 2025)
• Exploit #11883 - CVE-2025-32433-PoC (August 22, 2025)
• Exploit #11834 - CVE-2025-32433 (August 8, 2025)
• Exploit #11693 - CVE_2025_32433_exploit (June 20, 2025)
• Exploit #11692 - CVE-2025-32433-Erlang-OTP-SSH-Pre-Auth-RCE-exploit (Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote (June 20, 2025)
• Exploit #11691 - CVE-2025-32433-Erlang-OTP-SSH-Pre-Auth-RCE (Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code exe (June 20, 2025)
• Exploit #11360 - CVE-2025-32433 (A critical flaw has been discovered in Erlang/OTP's SSH server allows unauthenticated attackers to gain remote code execution. One malformed SSH handshake bypasses authentication and exploits improper handling of SSH protocol messages. ) (May 9, 2025)
• Exploit #11356 - Erlang OTP Pre-Auth RCE Scanner and Exploit (May 2, 2025)
• Exploit #11348 - CVE-2025-32433 (May 2, 2025)
• Exploit #11330 - CVE-2025-32433 (April 25, 2025)
• Exploit #11329 - POC_CVE-2025-32433 (April 25, 2025)
• Exploit #11327 - CVE-2025-32433 (April 18, 2025)
• Exploit #11326 - CVE-2025-32433 (April 18, 2025)

• http://www.openwall.com/lists/oss-security/2025/04/16/2
• https://github.com/erlang/otp/commit/0fcd9c56524b28615e8ece65fc0c3f66ef6e4c12
• https://github.com/erlang/otp/commit/6eef04130afc8b0ccb63c9a0d8650209cf54892f
• https://github.com/erlang/otp/commit/b1924d37fd83c070055beb115d5d6a6a9490b891
• https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2

• Remote code execution in Erlang/OTP SSH server
• Ubuntu update for erlang
• Debian update for erlang
• SUSE update for erlang26
• SUSE update for erlang
• Remote code execution in Cisco Products using Erlang/OTP SSH server
• Ubuntu update for erlang
• openEuler update for erlang
• Tenable Identity Exposure update for third-party components
• IBM PowerVC update for Erlang/OTP SSH Protocol
• Dell APEX Cloud Platform for Microsoft Azure update for third-party components
• Ubuntu update for erlang