CVE-2025-32433
criticalPriorität · handeln · 90KEV · ausgenutztEPSS 0.988 · 100. PerzentilExploit · waffenfähigDEEUNLRUUShinzugefügt 2025-06-09beheben bis 2025-06-30
erforderliche Maßnahme Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
EPSS · bewertet 2026-10-21
Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability
Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenRUGGEDCOM RST2428P (6GK6242-6PA00)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - BehobenSCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 familysiemens_psirt
See Section Additional Information.
- BehobenSCALANCE XCH328 (6GK5328-4TS01-2EC2)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - BehobenSCALANCE XCM324 (6GK5324-8TS01-2AC2)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - BehobenSCALANCE XCM328 (6GK5328-4TS01-2AC2)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - BehobenSCALANCE XCM332 (6GK5332-0GA01-2AC2)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - BehobenSCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - BehobenSCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - BehobenSCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - BehobenSCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - BehobenSCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - BehobenSCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - BehobenSCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - BehobenSCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - BehobenSCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - BehobenSCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - BehobenGalaxy VLcisa_csaf_ot
Version 18.10.0 of Galaxy VL includes a fix for this vulnerability and is available through your local FSR by contacting Schneider Electric's Customer Care Center.
- BehobenGalaxy VScisa_csaf_ot
Version 6.123.0 of Galaxy VS includes a fix for this vulnerability and is available through your local FSR by contacting Schneider Electric's Customer Care Center.
- BehobenGalaxy VXLcisa_csaf_ot
Version 15.29.0 of Galaxy VXL includes a fix for this vulnerability and is available through your local FSR by contacting Schneider Electric's Customer Care Center.
- BehobenRUGGEDCOM RST2428P (6GK6242-6PA00)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - BehobenSCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 familycisa_csaf_ot
See Section Additional Information.
- BehobenSCALANCE XCH328 (6GK5328-4TS01-2EC2)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - BehobenSCALANCE XCM324 (6GK5324-8TS01-2AC2)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - BehobenSCALANCE XCM328 (6GK5328-4TS01-2AC2)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - BehobenSCALANCE XCM332 (6GK5332-0GA01-2AC2)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - BehobenSCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - BehobenSCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - BehobenSCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - BehobenSCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - BehobenSCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - BehobenSCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - BehobenSCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - BehobenSCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - BehobenSCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - BehobenSCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/ - MitigationGalaxy VLcisa_csaf_ot
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: 1. Log on to the NMC4 via the Web Interface. Once logged into the system, navigate to the Console settings page from the menu bar by selecting Configuration -> Network -> Console -> Access 2. From the Console setting screen, uncheck the enable SSH/SFTP/SCP check box -> Click Apply As an alternative, setup network segmentation and implement a firewall to block all unauthorized access to SSH port 22/TCP. If assistance is needed applying the above mitigation, please contact our technical support team: https://www.se.com/ww/en/work/support/ To learn more, we recommend reviewing the Network Management Card 4 Security Handbook for specific actions available here to secure your devices further: https://www.se.com/us/en/download/document/SPD_CCON-B8EJSJ_EN/ To ensure you are informed of all updates, including details on affected products and remediation plans, subscribe to Schneider Electric's security notification service here: https://www.se.com/en/work/support/cybersecurity/security-notifications.jsp
https://www.se.com/us/en/download/document/SPD_CCON-B8EJSJ_EN/ - MitigationGalaxy VScisa_csaf_ot
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: 1. Log on to the NMC4 via the Web Interface. Once logged into the system, navigate to the Console settings page from the menu bar by selecting Configuration -> Network -> Console -> Access 2. From the Console setting screen, uncheck the enable SSH/SFTP/SCP check box -> Click Apply As an alternative, setup network segmentation and implement a firewall to block all unauthorized access to SSH port 22/TCP. If assistance is needed applying the above mitigation, please contact our technical support team: https://www.se.com/ww/en/work/support/ To learn more, we recommend reviewing the Network Management Card 4 Security Handbook for specific actions available here to secure your devices further: https://www.se.com/us/en/download/document/SPD_CCON-B8EJSJ_EN/ To ensure you are informed of all updates, including details on affected products and remediation plans, subscribe to Schneider Electric's security notification service here: https://www.se.com/en/work/support/cybersecurity/security-notifications.jsp
https://www.se.com/us/en/download/document/SPD_CCON-B8EJSJ_EN/ - MitigationGalaxy VXLcisa_csaf_ot
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: 1. Log on to the NMC4 via the Web Interface. Once logged into the system, navigate to the Console settings page from the menu bar by selecting Configuration -> Network -> Console -> Access 2. From the Console setting screen, uncheck the enable SSH/SFTP/SCP check box -> Click Apply As an alternative, setup network segmentation and implement a firewall to block all unauthorized access to SSH port 22/TCP. If assistance is needed applying the above mitigation, please contact our technical support team: https://www.se.com/ww/en/work/support/ To learn more, we recommend reviewing the Network Management Card 4 Security Handbook for specific actions available here to secure your devices further: https://www.se.com/us/en/download/document/SPD_CCON-B8EJSJ_EN/ To ensure you are informed of all updates, including details on affected products and remediation plans, subscribe to Schneider Electric's security notification service here: https://www.se.com/en/work/support/cybersecurity/security-notifications.jsp
https://www.se.com/us/en/download/document/SPD_CCON-B8EJSJ_EN/
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
ATT&CK-Techniken
ATT&CK-Techniken, die dies ermöglicht oder abbildet.
Exploits (42)
Öffentlicher Proof-of-Concept- und Exploit-Code.
- exploit/linux/ssh/ssh_erlangotp_rceErlang OTP Pre-Auth RCE Scanner and Exploitwaffenfähig · metasploit
- 0xBlackash/CVE-2025-32433CVE-2025-32433PoC · poc_in_github
- 0xPThree/cve-2025-324330xPThree/cve-2025-32433PoC · poc_in_github
betroffene Produkte (137)
Betroffene Produkte und Versionsbereiche.
- Cisco Network Services Orchestratoralle Versionencert_bundDEcpe:/a:cisco:network_services_orchestrator:-
Advisories (5)
Hersteller- und Ökosystem-Meldungen dazu.
- NCSC-2025-0137Kwetsbaarheid verholpen in Erlang/OTP SSH-serverNL2025-04-18csaf · ncsc_nlNL
De ontwikkelaars van Erlang/OTP hebben een kwetsbaarheid verholpen in Erlang OTP.
- SSA-089022SSA-089022: Multiple Vulnerabilities in Third-Party Components in SINEC OS before V3.32026-01-28csaf · siemens_psirtDE
SINEC OS before V3.3 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
- WID-SEC-W-2025-0838Erlang/OTP SSH: Schwachstelle ermöglicht CodeausführungDeutsch2025-04-16csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Erlang/OTP ausnutzen, um beliebigen Programmcode auszuführen.
- ICSA-25-140-07Schneider Electric Galaxy VS, Galaxy VL, Galaxy VXL (Update A)2025-05-13icsa · cisa_csaf_otUS
Schneider Electric is aware of a vulnerability disclosed on the Erlang/OTP's SSH Server component used Schneider Electric Galaxy VS, VL, and VXL.Many vendors, including Schneider Electric, embed the Erlang/OTP's SSH Server in their offers.The Galaxy VS, Galaxy VL, Galaxy VXL products are 3-phase UPS for data centers and other business critical applications.Failure to apply the mitigation provided below may risk unauthenticated remote code execution (RCE), which could impact the monitoring capabilities of the UPS and potential UPS operation.
- ICSA-26-043-06Siemens SINEC OS2026-01-28icsa · cisa_csaf_otUS
SINEC OS before V3.3 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (26)
Externe Belege — Patches, Meldungen, Analysen.
- http://www.openwall.com/lists/oss-security/2025/04/16/2cnnvd
- https://access.redhat.com/security/cve/cve-2025-32433cnnvd
- https://github.com/erlang/otp/commit/0fcd9c56524b28615e8ece65fc0c3f66ef6e4c12cnnvd
- https://github.com/erlang/otp/commit/6eef04130afc8b0ccb63c9a0d8650209cf54892fcnnvd
- https://github.com/erlang/otp/commit/b1924d37fd83c070055beb115d5d6a6a9490b891cnnvd
- https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2cnnvd
- https://vigilance.fr/vulnerability/Erlang-OTP-SSH-code-execution-dated-18-04-2025-46920cnnvd
- https://www.erlang.org/downloadsPatchcnnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan