Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools

N/A

Source -

N/A

CNA CVEs -

0

ADP CVEs -

0

CISA CVEs -

0

NVD CVEs -

0
Related CVEsRelated VendorsRelated AssignersReports
0Vulnerabilities found
CVE-2025-32433
Assigner-GitHub, Inc.
ShareView Details
Assigner-GitHub, Inc.
CVSS Score-10||CRITICAL
EPSS-66.92% / 98.49%
||
7 Day CHG+6.00%
Published-16 Apr, 2025 | 21:34
Updated-20 Aug, 2025 | 03:55
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Known KEV||Action Due Date - 2025-06-30||Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.

Action-Not Available
Vendor-erlangerlangErlangCisco Systems, Inc.
Product-rv340wrv260ultra_cloud_corerv260p_firmwareinode_managerncs_1002ultra_packet_corerv160ncs_1004rv340rv345_firmwarenetwork_services_orchestratorrv260pncs_1001rv260wrv160_firmwarencs_2000_shelf_virtualization_orchestrator_modulerv160w_firmwarerv345poptical_site_managerultra_services_platformsmart_phyrv345rv260w_firmwareenterprise_nfv_infrastructure_softwareconfd_basicrv340w_firmwareerlang\/otprv160wstaroscloud_native_broadband_network_gatewayncs_2000_shelf_virtualization_orchestrator_firmwarerv340_firmwarerv345p_firmwarerv260_firmwareotpErlang/OTP
CWE ID-CWE-306
Missing Authentication for Critical Function