CVE-2025-32433 PoC — Erlang/OTP 访问控制错误漏洞

Description

Security research on Erlang/OTP SSH CVE-2025-32433.

介绍

# Security research on Erlang/OTP SSH CVE-2025-32433

Python exploit Proof-of-Concept CVE-2025-32433 Unauthenticated Remote Code Execution in Erlang/OTP SSH. I also have a [banner grabbing Nuclei template](https://github.com/darses/nuclei-templates/blob/main/erlang-otp-ssh-detect.yaml) and a [Nuclei RCE](https://github.com/darses/nuclei-templates/blob/main/cve-2025-32433.yaml) check.

The Suricata and Zeek IDS logs are in order based on a succesful Paramiko attack, two regular OpenSSH_9.8 connections without attack, two succesful attacks using [ProDefense/CVE-2025-32433](https://github.com/ProDefense/CVE-2025-32433/blob/main/CVE-2025-32433.py) and one succesful attack using [CVE-2025-32433.yaml by iamnoooob,rootxharsh,pdresearch](https://github.com/projectdiscovery/nuclei-templates/pull/11960/files). Suricata ran with only my own custom rules in `suricata.rules`.

The Suricata rules only detect unencrypted channel open/request messages, which are assumed to be sent unauthenticated.

I have not tested the rules against realistic traffic logs.

## HASHH
- `a42d62b326c107401e08c1ee316f28b6` CVE-2025-32433.yaml by iamnoooob,rootxharsh,pdresearch
- `ca3cc8a7d31514fa9b48636eaec05a78` ProDefense/CVE-2025-32433
- `a2de0f306611e0957be704f5b0e35a82` Paramiko script

文件快照

备注