CVE-2025-32433
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
En resumen
El servidor SSH de Erlang/OTP tiene un defecto crítico que permite que atacantes ejecuten comandos en sistemas afectados sin necesidad de contraseña o credenciales válidas. Este es un riesgo de seguridad grave porque cualquier persona en la red puede potencialmente tomar control del servidor.
Detalle técnico
Un defecto en el manejo de mensajes del protocolo SSH en versiones de Erlang/OTP anteriores a OTP-27.3.3, OTP-26.2.5.11 y OTP-25.3.2.20 permite ejecución remota de código no autenticada. La vulnerabilidad requiere acceso de red al servidor SSH pero ninguna autenticación previa; los atacantes pueden explotar validación inadecuada de mensajes para ejecutar comandos arbitrarios con privilegios del servidor.
Resumen generado y traducido por IA a partir de la descripción oficial.
Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Productos afectados
erlang · otpPoCs públicas encontradas — 39
githubgithub.com/ProDefense/CVE-2025-32433★ 142githubgithub.com/omer-efe-curkus/CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC★ 16githubgithub.com/NiteeshPujari/CVE-2025-32433-PoC★ 7githubgithub.com/0xPThree/cve-2025-32433★ 6githubgithub.com/m0usem0use/erl_mouse★ 5githubgithub.com/ekomsSavior/POC_CVE-2025-32433★ 5githubgithub.com/exa-offsec/ssh_erlangotp_rce★ 3githubgithub.com/dollarboysushil/CVE-2025-32433-Erlang-OTP-SSH-Unauthenticated-RCE★ 3githubgithub.com/LemieOne/CVE-2025-32433★ 3githubgithub.com/0x7556/CVE-2025-32433★ 3githubgithub.com/darses/CVE-2025-32433★ 3githubgithub.com/yonathanpy/CVE-2025-32433.py★ 2githubgithub.com/mirmeweu/cve-2025-32433★ 2githubgithub.com/AntonieSoga/Erlang-OTP-PoC_CVE-2025-32433★ 2githubgithub.com/joshuavanderpoll/cve-2025-32433★ 2githubgithub.com/becrevex/CVE-2025-32433★ 1githubgithub.com/Know56/CVE-2025-32433★ 1githubgithub.com/teamtopkarl/CVE-2025-32433★ 1githubgithub.com/bilalz5-github/Erlang-OTP-SSH-CVE-2025-32433★ 1githubgithub.com/iteride/CVE-2025-32433★ 1githubgithub.com/vigilante-1337/CVE-2025-32433★ 0githubgithub.com/Epivalent/CVE-2025-32433-detection★ 0githubgithub.com/meloppeitreet/CVE-2025-32433-Remote-Shell★ 0githubgithub.com/ps-interactive/lab_CVE-2025-32433★ 0githubgithub.com/MrDreamReal/CVE-2025-32433★ 0githubgithub.com/abrewer251/CVE-2025-32433_Erlang-OTP_PoC★ 0githubgithub.com/te0rwx/CVE-2025-32433-Detection★ 0githubgithub.com/Mdusmandasthaheer/CVE-2025-32433★ 0githubgithub.com/l1nuxkid/CVE-2025-32433-exploit★ 0githubgithub.com/soltanali0/CVE-2025-32433-Eploit★ 0githubgithub.com/giriaryan694-a11y/cve-2025-32433_rce_exploit★ 0githubgithub.com/blackcat4347/CVE-2025-32433-available-for-windows★ 0githubgithub.com/carlosalbertotuma/CVE-2025-32433★ 0githubgithub.com/0xBlackash/CVE-2025-32433★ 0githubgithub.com/leehunkoo/hk_CVE-2025-32433★ 0githubgithub.com/chuzouX/CVE-2025-32433-Exploit-edited★ 0githubgithub.com/dampedcoast/Exploiting-a-vulnerability-using-reverse-shell★ 0githubgithub.com/ODST-Forge/CVE-2025-32433_PoC★ 0cve_referencegithub.com/ProDefense/CVE-2025-32433/blob/main/CVE-2025-32433.pyno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →Referencias
https://github.com/erlang/otp/commit/0fcd9c56524b28615e8ece65fc0c3f66ef6e4c12https://github.com/erlang/otp/commit/6eef04130afc8b0ccb63c9a0d8650209cf54892fhttps://github.com/erlang/otp/commit/b1924d37fd83c070055beb115d5d6a6a9490b891https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2https://github.com/ProDefense/CVE-2025-32433/blob/main/CVE-2025-32433.pyhttps://lists.debian.org/debian-lts-announce/2025/04/msg00028.htmlhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-erlang-otp-ssh-xyZZyhttps://security.netapp.com/advisory/ntap-20250425-0001/https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-32433http://www.openwall.com/lists/oss-security/2025/04/16/2http://www.openwall.com/lists/oss-security/2025/04/18/1http://www.openwall.com/lists/oss-security/2025/04/18/2