Description
Erlang/OTP是一种广泛使用的编程语言和运行时系统，主要用于构建分布式系统。Erlang/OTP SSH实现中存在一个关键安全漏洞，允许攻击者通过SSH协议消息处理缺陷在未经身份验证的情况下执行任意代码。当SSH守护进程以root权限运行时，攻击者可完全控制设备。该漏洞影响所有基于Erlang/OTP SSH库的SSH服务器。
Erlang/OTP SSH服务器 代码执行漏洞（CVE-2025-32433）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-32433
https://www.cve.org/CVERecord?id=CVE-2025-32433
https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-erlang-otp-ssh-xyZZy
https://origin-unit42.paloaltonetworks.com/erlang-otp-cve-2025-32433/
https://www.tenable.com/cve/CVE-2025-32433
https://arcticwolf.com/resources/blog/cve-2025-32433/
https://www.keysight.com/blogs/en/tech/nwvs/2025/05/23/cve-2025-32433-erlang-otp-ssh-server-rce
https://www.sonicwall.com/blog/pre-auth-rce-alert-critical-ssh-flaw-in-erlang-otp-cve-2025-32433-
https://access.redhat.com/security/cve/cve-2025-32433
https://seclists.org/oss-sec/2025/q2/52
https://www.offsec.com/blog/cve-2025-32433/
https://blog.securelayer7.net/cve-2025-32433-erlang-rce-otp-ssh/