Cisco Systems has issued a critical security advisory confirming that multiple products across its portfolio are affected by a remote code execution (RCE) vulnerability in the Erlang/OTP SSH server (CVE-2025-32433). The vulnerability impacts critical infrastructure components ranging from network orchestration tools to enterprise routing platforms, with proof-of-concept exploit code already circulating in security communities. With Erlang/OTP underpinning critical infrastructure components, this vulnerability poses systemic risks to telecommunications networks, cloud platforms, and enterprise IT environments. Cyber Security News is a Dedicated News Platform For Cyber News, Cyber Attack News, Hacking News & Vulnerability Analysis. The vulnerability resides in the Erlang/OTP implementation of the SSH protocol (RFC 4252), specifically in the processing of channel request messages prior to successful authentication. The Erlang/OTP platform’s concurrency model exacerbates the risk, as a single compromised SSH connection could spawn malicious processes across distributed nodes in clustered environments. Gurubaran is a co-founder of Cyber Security News and GBHackers On Security.
This Cyber News was published on cybersecuritynews.com. Publication date: Thu, 24 Apr 2025 12:55:07 +0000