Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25), Erlang/OTP SSH fails to enforce strict KEX handshake hardening measures by allowing optional messages to be exchanged. This allows a Man-in-the-Middle attacker to inject these messages in a connection during the handshake. This issue has been patched in versions OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25).

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7656-1 advisory.

    It was discovered that Erlang OTPs SSH module incorrectly enforced strict KEX handshake hardening     measures. A remote attacker able to intercept communications could possibly use this issue to insert     optional messages into connections during the handshake. (CVE-2025-46712)

    It was discovered that Erlang OTP incorrectly handled ZIP archives. If a user or automated system were     tricked into opening a specially crafted ZIP archive, a remote attacker could possibly use this issue to     overwrite arbitrary files outside of the intended directory. (CVE-2025-4748)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of erlang installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-46712 advisory.

  - Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 (for     OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25), Erlang/OTP SSH fails to enforce     strict KEX handshake hardening measures by allowing optional messages to be exchanged. This allows a Man-     in-the-Middle attacker to inject these messages in a connection during the handshake. This issue has been     patched in versions OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25).
    (CVE-2025-46712)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of erlang installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-46712 advisory.

  - Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 (for     OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25), Erlang/OTP SSH fails to enforce     strict KEX handshake hardening measures by allowing optional messages to be exchanged. This allows a Man-     in-the-Middle attacker to inject these messages in a connection during the handshake. This issue has been     patched in versions OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25).
    (CVE-2025-46712)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
242577	Ubuntu 22.04 LTS / 24.04 LTS / 25.04 : Erlang vulnerabilities (USN-7656-1)	Nessus	Ubuntu Local Security Checks	medium
241931	CBL Mariner 2.0 Security Update: erlang (CVE-2025-46712)	Nessus	MarinerOS Local Security Checks	low
241855	Azure Linux 3.0 Security Update: erlang (CVE-2025-46712)	Nessus	Azure Linux Local Security Checks	low

Detections

Analytics

CVE-2025-46712

low

Tenable Plugins

medium

low

low