CVE-2025-46712

Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25), Erlang/OTP SSH fails to enforce strict KEX handshake hardening measures by allowing optional messages to be exchanged. This allows a Man-in-the-Middle attacker to inject these messages in a connection during the handshake. This issue has been patched in versions OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25).

CVSS v3 3.7 LOW

3.7^/10

CVSS v3 : LOW

Vector :

Exploitability : 2.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/erlang/otp/releases/tag/OTP-25.3.2.21
https://github.com/erlang/otp/releases/tag/OTP-26.2.5.12
https://github.com/erlang/otp/releases/tag/OTP-27.3.4
https://github.com/erlang/otp/security/advisories/GHSA-934x-xq38-hhqf

Configurations

No configuration.

History

12 May 2025, 17:32

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-05-08 20:15

Updated : 2025-05-12 17:32

NVD link : CVE-2025-46712

Mitre link : CVE-2025-46712

CVE.ORG link : CVE-2025-46712

JSON object : View

Products Affected

No product.

CWE

CWE-440

Expected Behavior Violation

{"id": "CVE-2025-46712", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.7, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.2}]}, "published": "2025-05-08T20:15:30.807", "references": [{"url": "https://github.com/erlang/otp/releases/tag/OTP-25.3.2.21", "source": "security-advisories@github.com"}, {"url": "https://github.com/erlang/otp/releases/tag/OTP-26.2.5.12", "source": "security-advisories@github.com"}, {"url": "https://github.com/erlang/otp/releases/tag/OTP-27.3.4", "source": "security-advisories@github.com"}, {"url": "https://github.com/erlang/otp/security/advisories/GHSA-934x-xq38-hhqf", "source": "security-advisories@github.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Primary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-440"}]}], "descriptions": [{"lang": "en", "value": "Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25), Erlang/OTP SSH fails to enforce strict KEX handshake hardening measures by allowing optional messages to be exchanged. This allows a Man-in-the-Middle attacker to inject these messages in a connection during the handshake. This issue has been patched in versions OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25)."}, {"lang": "es", "value": "Erlang/OTP es un conjunto de librer\u00edas para el lenguaje de programaci\u00f3n Erlang. En versiones anteriores a OTP-27.3.4 (para OTP-27), OTP-26.2.5.12 (para OTP-26) y OTP-25.3.2.21 (para OTP-25), Erlang/OTP SSH no aplica medidas estrictas de reforzamiento del protocolo de enlace KEX al permitir el intercambio de mensajes opcionales. Esto permite que un atacante intermediario inyecte estos mensajes en una conexi\u00f3n durante el protocolo de enlace. Este problema se ha corregido en las versiones OTP-27.3.4 (para OTP-27), OTP-26.2.5.12 (para OTP-26) y OTP-25.3.2.21 (para OTP-25)."}], "lastModified": "2025-05-12T17:32:52.810", "sourceIdentifier": "security-advisories@github.com"}