Critical severity10.0CISA KEVNVD Advisory· Published Apr 16, 2025· Updated Jun 17, 2026

CVE-2025-32433

Description

Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Cloud Native Broadband Network Gateway
cpe:2.3:a:cisco:cloud_native_broadband_network_gateway:*:*:*:*:*:*:*:*
Range: <2025.03.1
Cisco Systems, Inc./Confd Basic
cpe:2.3:a:cisco:confd_basic:*:*:*:*:*:*:*:*
Range: <7.7.19.1
Cisco Systems, Inc./Enterprise Nfv Infrastructure Software
cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:*:*:*:*:*:*:*:*
Range: <4.18
Cisco Systems, Inc./Inode Manager
cpe:2.3:a:cisco:inode_manager:-:*:*:*:*:*:*:*
Cisco Systems, Inc./Network Services Orchestrator
cpe:2.3:a:cisco:network_services_orchestrator:*:*:*:*:*:*:*:*
Range: <5.7.19.1
Cisco Systems, Inc./Optical Site Manager
cpe:2.3:a:cisco:optical_site_manager:*:*:*:*:*:*:*:*
Range: <25.2.1
Cisco Systems, Inc./Smart Phy
cpe:2.3:a:cisco:smart_phy:*:*:*:*:*:*:*:*
Range: <25.2
Cisco Systems, Inc./Ultra Cloud Core
cpe:2.3:a:cisco:ultra_cloud_core:*:*:*:*:*:*:*:*
Range: <2025.03.1
Cisco Systems, Inc./Ultra Packet Core
cpe:2.3:a:cisco:ultra_packet_core:*:*:*:*:*:*:*:*
Range: <2025.03
Cisco Systems, Inc./Ultra Services Platform
cpe:2.3:a:cisco:ultra_services_platform:-:*:*:*:*:*:*:*
Erlang/Erlang\/otp
cpe:2.3:a:erlang:erlang\/otp:*:*:*:*:*:*:*:*
Range: <25.3.2.20
Cisco Systems, Inc./Ncs 2000 Shelf Virtualization Orchestrator Firmware
cpe:2.3:o:cisco:ncs_2000_shelf_virtualization_orchestrator_firmware:*:*:*:*:*:*:*:*
Range: <25.1.1
Cisco Systems, Inc./Rv160 Firmware
cpe:2.3:o:cisco:rv160_firmware:-:*:*:*:*:*:*:*
Cisco Systems, Inc./Rv160w Firmware
cpe:2.3:o:cisco:rv160w_firmware:-:*:*:*:*:*:*:*
Cisco Systems, Inc./Rv260 Firmware
cpe:2.3:o:cisco:rv260_firmware:-:*:*:*:*:*:*:*
Cisco Systems, Inc./Rv260p Firmware
cpe:2.3:o:cisco:rv260p_firmware:-:*:*:*:*:*:*:*
Cisco Systems, Inc./Rv260w Firmware
cpe:2.3:o:cisco:rv260w_firmware:-:*:*:*:*:*:*:*
Cisco Systems, Inc./Rv340 Firmware
cpe:2.3:o:cisco:rv340_firmware:-:*:*:*:*:*:*:*
Cisco Systems, Inc./Rv340w Firmware
cpe:2.3:o:cisco:rv340w_firmware:-:*:*:*:*:*:*:*
Cisco Systems, Inc./Rv345 Firmware
cpe:2.3:o:cisco:rv345_firmware:-:*:*:*:*:*:*:*
Cisco Systems, Inc./Rv345p Firmware
cpe:2.3:o:cisco:rv345p_firmware:-:*:*:*:*:*:*:*
Cisco Systems, Inc./Staros
cpe:2.3:o:cisco:staros:*:*:*:*:*:*:*:*
Range: <2025.03
Debian/linux
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
Erlang/OTPllm-fuzzy2 versions
< OTP-27.3.3, < OTP-26.2.5.11, < OTP-25.3.2.20+ 1 more
- (no CPE)range: < OTP-27.3.3, < OTP-26.2.5.11, < OTP-25.3.2.20
- (no CPE)range: >= OTP-27.0-rc1, < OTP-27.3.3
osv-coords18 versions
pkg:rpm/opensuse/erlang&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/erlang26&distro=openSUSE%20Leap%2015.6 pkg:rpm/suse/erlang&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/erlang&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/erlang&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/erlang&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/erlang&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/erlang&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/erlang&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP6 pkg:rpm/suse/erlang&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/erlang&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/erlang&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/erlang&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/erlang&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/erlang&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5 pkg:rpm/suse/erlang&distro=SUSE%20Manager%20Proxy%204.3 pkg:rpm/suse/erlang&distro=SUSE%20Manager%20Server%204.3 pkg:rpm/suse/erlang26&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP6
< 23.3.4.19-150300.3.20.1+ 17 more
- (no CPE)range: < 23.3.4.19-150300.3.20.1
- (no CPE)range: < 26.2.1-150300.7.11.1
- (no CPE)range: < 23.3.4.19-150300.3.20.1
- (no CPE)range: < 23.3.4.19-150300.3.20.1
- (no CPE)range: < 23.3.4.19-150300.3.20.1
- (no CPE)range: < 23.3.4.19-150300.3.20.1
- (no CPE)range: < 23.3.4.19-150300.3.20.1
- (no CPE)range: < 23.3.4.19-150300.3.20.1
- (no CPE)range: < 23.3.4.19-150300.3.20.1
- (no CPE)range: < 23.3.4.19-150300.3.20.1
- (no CPE)range: < 23.3.4.19-150300.3.20.1
- (no CPE)range: < 23.3.4.19-150300.3.20.1
- (no CPE)range: < 23.3.4.19-150300.3.20.1
- (no CPE)range: < 23.3.4.19-150300.3.20.1
- (no CPE)range: < 23.3.4.19-150300.3.20.1
- (no CPE)range: < 23.3.4.19-150300.3.20.1
- (no CPE)range: < 23.3.4.19-150300.3.20.1
- (no CPE)range: < 26.2.1-150300.7.11.1

Patches

Vulnerability mechanics

References

github.com/erlang/otp/commit/0fcd9c56524b28615e8ece65fc0c3f66ef6e4c12nvdPatch
github.com/erlang/otp/commit/6eef04130afc8b0ccb63c9a0d8650209cf54892fnvdPatch
github.com/erlang/otp/commit/b1924d37fd83c070055beb115d5d6a6a9490b891nvdPatch
github.com/ProDefense/CVE-2025-32433/blob/main/CVE-2025-32433.pynvdExploit
github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2nvdVendor Advisory
lists.debian.org/debian-lts-announce/2025/04/msg00028.htmlnvdThird Party Advisory
sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-erlang-otp-ssh-xyZZynvdThird Party Advisory
security.netapp.com/advisory/ntap-20250425-0001/nvdThird Party Advisory
www.openwall.com/lists/oss-security/2025/04/16/2nvdMailing List
www.openwall.com/lists/oss-security/2025/04/18/1nvdMailing List
www.openwall.com/lists/oss-security/2025/04/18/2nvdMailing List
www.openwall.com/lists/oss-security/2025/04/18/6nvdMailing List
www.openwall.com/lists/oss-security/2025/04/19/1nvdMailing List
www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

News mentions

No Manners Here: The Ruthless Rise of The Gentlemen Ransomware
Unit 42 · Jul 10, 2026
The Gentlemen Ransomware With Custom EDR/AV Killers Scaling Faster to Attack Industries Worldwide
Cyber Security News · Jul 7, 2026
The Gentlemen Ransomware Claims 478 Victims, Can Spread Like a Worm
The Hacker News · Jun 11, 2026
The Gentlemen Ransomware Group Uses Fortinet Exploits, AI, and Custom C2 Frameworks
Cyber Security News · Jun 3, 2026
Thus Spoke…The Gentlemen
Check Point Research · May 13, 2026

cvss	0.650
epss	0.079
exploit	0.030
kev	0.120
patch	0.000
ransomware	0.000