Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-32433

98
FAUCET Score

CVE-2025-32433 is a critical unauthenticated remote code execution (RCE) vulnerability in Erlang/OTP's SSH server, affecting versions prior to OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, including products from Cisco and Debian. This flaw allows attackers to execute arbitrary commands without credentials by exploiting a weakness in SSH protocol message handling. With a CVSS score of 10.0, the vulnerability is easily exploitable over the network with no user interaction, leading to complete compromise of confidentiality, integrity, and availability. This CVE is actively exploited in the wild, has public exploit modules available in Metasploit and Nuclei, and has garnered significant community and media attention, indicating a high risk of compromise.

Impacted Technologies

VendorProductVersion(s)CPE
< 25.3.2.20CPE matchmatch criteria
cpe:2.3:a:erlang:erlang\/otp:*:*:*:*:*:*:*:*
>= 26.0, < 26.2.5.11CPE matchmatch criteria
cpe:2.3:a:erlang:erlang\/otp:*:*:*:*:*:*:*:*
>= 27.0, < 27.3.3CPE matchmatch criteria
cpe:2.3:a:erlang:erlang\/otp:*:*:*:*:*:*:*:*
< 7.7.19.1CPE matchmatch criteria
cpe:2.3:a:cisco:confd_basic:*:*:*:*:*:*:*:*
>= 8.0.18, < 8.1.16.2CPE matchmatch criteria
cpe:2.3:a:cisco:confd_basic:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

10.0CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
6.0
CvssVersion
3.1

Exploit Intelligence

EPSS Score
98.59%
Probability of exploitation in next 30 days
EPSS Percentile
99.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
Added to KEV · Jun 9, 2025
Metasploit: Erlang OTP Pre-Auth RCE Scanner and Exploit · Apr 16, 2025
Nuclei: CVE-2025-32433 · Apr 18, 2025
This CVE's current EPSS score of 0.9859 is in the 99th percentile among its peer group of 36,835 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (9)

github_advisorypatch availablevia nvd_reference
View patch
microsoftpatch availablevia msrc
Product: 19449-17084Fixed in: 26.2.5.11-1
microsoftpatch availablevia msrc
Product: 19374-17084Fixed in: 26.2.5.11-1
microsoftpatch availablevia msrc
Product: 19448-16823Fixed in: 25.3.2.20-1
microsoftpatch availablevia msrc
Product: 20067-17086Fixed in: 25.3.2.20-1
microsoftpatch availablevia msrc
Product: azl3 erlang 26.2.5.9-1 on Azure Linux 3.0Fixed in: 26.2.5.11-1
microsoftpatch availablevia msrc
Product: azl3 erlang 26.2.5.11-1 on Azure Linux 3.0Fixed in: 26.2.5.11-1
microsoftpatch availablevia msrc
Product: cbl2 erlang 25.3.2.20-1 on CBL Mariner 2.0Fixed in: 25.3.2.20-1
microsoftpatch availablevia msrc
Product: cbl2 erlang 25.2-3 on CBL Mariner 2.0Fixed in: 25.3.2.20-1

Vendor Advisories (1)

microsoft2025-Apr/CVE-2025-32433Critical

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

Apr 8, 2025

References

github.com / ProDefense/CVE-2025-32433/blob/main/CVE-2025-32433.py
Exploit
sec.cloudapps.cisco.com / security/center/content/CiscoSecurityAdvisory/cisco-sa-erlang-otp-ssh-xyZZy
Third Party Advisory
cisa.gov / known-exploited-vulnerabilities-catalog
US Government Resource
lists.debian.org / debian-lts-announce/2025/04/msg00028.html
Third Party Advisory
security.netapp.com / advisory/ntap-20250425-0001
Third Party Advisory
openwall.com / lists/oss-security/2025/04/16/2
Mailing List
openwall.com / lists/oss-security/2025/04/18/1
Mailing List
openwall.com / lists/oss-security/2025/04/18/2
Mailing List
openwall.com / lists/oss-security/2025/04/18/6
Mailing List
openwall.com / lists/oss-security/2025/04/19/1
Mailing List
github.com / erlang/otp/commit/0fcd9c56524b28615e8ece65fc0c3f66ef6e4c12
Patch
github.com / erlang/otp/commit/6eef04130afc8b0ccb63c9a0d8650209cf54892f
Patch
github.com / erlang/otp/commit/b1924d37fd83c070055beb115d5d6a6a9490b891
Patch
github.com / erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2
Vendor Advisory