---
title: "Security digest: April 16, 2025"
url: https://erroneo.us/security/2025-04-16/
description: "April 16, 2025 vulnerability digest: 1 brief (Erlang/OTP SSH: Unauthenticated RCE…); 1 CISA KEV addition (SonicWall). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2025-04-16
date_modified: 2026-10-21
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: April 16, 2025

1 editorial brief and 1 known exploited (cisa kev) addition.

## Take stock

- Check exposure: Erlang/OTP SSH: Unauthenticated RCE (CVE-2025-32433) . Teams running Erlang/Elixir apps that start the OTP ssh daemon, and owners of network, telecom or OT appliances built on Erlang (for example Cisco ConfD, NSO, StarOS components).
- Do you run any of these? SonicWall SMA100 Appliances. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2025-05-07.
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Editorial briefs

- **Check exposure** [Erlang/OTP SSH: Unauthenticated RCE (CVE-2025-32433)](https://erroneo.us/security/briefs/erlang-otp-ssh-unauthenticated-rce-cve-2025-32433/index.md): The OTP fix is 18 months old, but the bug hides inside appliances and OT gear that patch slowly; inventory anything exposing an Erlang SSH daemon rather than assuming your servers' OpenSSH covers you.

## Known exploited (CISA KEV)

- [CVE-2021-20035](https://erroneo.us/security/cve/CVE-2021-20035/index.md) SonicWall SMA100 Appliances: SonicWall SMA100 Appliances OS Command Injection Vulnerability (CISA due 2025-05-07)

## Critical advisories

None.

---
Source page: https://erroneo.us/security/2025-04-16/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt