## https://sploitus.com/exploit?id=D5E022E6-59DB-56AF-9E41-5A4117CACCC8
# Security research on Erlang/OTP SSH CVE-2025-32433
Python exploit Proof-of-Concept CVE-2025-32433 Unauthenticated Remote Code Execution in Erlang/OTP SSH. I also have a [banner grabbing Nuclei template](https://github.com/darses/nuclei-templates/blob/main/erlang-otp-ssh-detect.yaml) and a [Nuclei RCE](https://github.com/darses/nuclei-templates/blob/main/cve-2025-32433.yaml) check.
The Suricata and Zeek IDS logs are in order based on a succesful Paramiko attack, two regular OpenSSH_9.8 connections without attack, two succesful attacks using [ProDefense/CVE-2025-32433](https://github.com/ProDefense/CVE-2025-32433/blob/main/CVE-2025-32433.py) and one succesful attack using [CVE-2025-32433.yaml by iamnoooob,rootxharsh,pdresearch](https://github.com/projectdiscovery/nuclei-templates/pull/11960/files). Suricata ran with only my own custom rules in `suricata.rules`.
The Suricata rules only detect unencrypted channel open/request messages, which are assumed to be sent unauthenticated.
I have not tested the rules against realistic traffic logs.
## HASHH
- `a42d62b326c107401e08c1ee316f28b6` CVE-2025-32433.yaml by iamnoooob,rootxharsh,pdresearch
- `ca3cc8a7d31514fa9b48636eaec05a78` ProDefense/CVE-2025-32433
- `a2de0f306611e0957be704f5b0e35a82` Paramiko script