CASCACascade Atlas

Evidence dossier

CVE-2025-32433

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

Exploited in the wild (CISA KEV since Jun 9, 2025). GitHub_M reports CVSS 3.1 10.0. EPSS estimates 98.6% exploit likelihood as of Aug 8, 2026.

94.0–94.5Priority evidence range
Evidence current through Aug 27, 2026, 6:09 PM UTC

As of Aug 27, 2026

Normalized restatement

Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.

State
PUBLISHED
Published
Apr 16, 2025
Updated
Feb 26, 2026
Evidence coverage
99%

Evidence chronology

What was known when

Download this view's receipt →
  1. Source dateSource date omittedFirst observed by CASCA
    CISA-ADP

    Record text: CISA ADP Vulnrichment

    Inspect raw assertion
    Field
    container
    Value
    CISA ADP Vulnrichment
    Original evidence ↗
  2. Source dateSource date omittedFirst observed by CASCA
    CVE Program

    Record text: CVE Program Container

    Inspect raw assertion
    Field
    container
    Value
    CVE Program Container
    Original evidence ↗
  3. Source dateSource date omittedFirst observed by CASCA
    GitHub_M

    Record text: Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

    Inspect raw assertion
    Field
    container
    Value
    Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
    Original evidence ↗
  4. Source dateFirst observed by CASCA
    CISA KEV

    Exploitation cataloged: Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability

    Inspect raw assertion
    Field
    observed_exploitation
    Value
    Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability
    Original evidence ↗
  5. Source dateFirst observed by CASCA
    FIRST EPSS

    EPSS score: 98.59% probability · 99.92th percentile

    Inspect raw assertion
    Field
    model_probability
    Value
    Probability 0.985940000000; percentile 0.999180000000
    Original evidence ↗
ExploitationCatalog member

CISA KEV · catalog date Jun 9, 2025 · first observed Jul 19, 2026

Exploit likelihood98.59%

FIRST EPSS · score date Aug 8, 2026 · 99.9th percentile · first observed Aug 8, 2026

SeverityCVSS 10.0

GitHub_M · CVSS 3.1 · first observed Jul 19, 2026 · same-version scores align in this snapshot

Evidence detail

Source limits and decisions

Why each evidence state has this value

casca-unknown-reasons-v1
Exploitation statusEvidence supported

Eligible evidence is present for this bounded claim.

Revision
evidence-policy-v1.1.0
Cutoff
Aug 27, 2026
Resolution
None
Exploit likelihoodEvidence supported

Eligible evidence is present for this bounded claim.

Revision
evidence-policy-v1.1.0
Cutoff
Aug 27, 2026
Resolution
None
Severity assessmentEvidence supported

Eligible evidence is present for this bounded claim.

Revision
casca-direct-cvss-eligibility-v1
Cutoff
Aug 27, 2026
Resolution
None
Affected productsSource-reported scope

The cited source assertion is retained while canonical product linkage remains open.

Revision
casca-factor-d-obligations-v1
Cutoff
Aug 27, 2026
Resolution
Resolve identity

Source comparison

Who said what

CISA-ADPIndependent enrichment
Record text

CISA ADP Vulnrichment

Inspect raw assertion
Field
container
Value
CISA ADP Vulnrichment
Source dateSource date omittedFirst observed by CASCAOriginal evidence ↗
CVE ProgramDerivative copy
Record text

CVE Program Container

Inspect raw assertion
Field
container
Value
CVE Program Container
Source dateSource date omittedFirst observed by CASCAOriginal evidence ↗
GitHub_MOriginal assertion
Record text

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

Inspect raw assertion
Field
container
Value
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
Source dateSource date omittedFirst observed by CASCAOriginal evidence ↗
CISA KEVOriginal assertion
Exploitation cataloged

Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability

Inspect raw assertion
Field
observed_exploitation
Value
Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability
Source dateFirst observed by CASCAOriginal evidence ↗
FIRST EPSSOriginal assertion
EPSS score

98.59% probability · 99.92th percentile

Inspect raw assertion
Field
model_probability
Value
Probability 0.985940000000; percentile 0.999180000000
Source dateFirst observed by CASCAOriginal evidence ↗

Applicability

Cited product scope

Trace impact →
47Underlying assertions
36Canonical products
34Target assertions
13Constraint assertions

Grouped from 28 configuration nodes in this exact snapshot. Visual grouping is navigational; asset exposure and root cause require cited evidence.

Identity source boundaries
  • Cpe dictionary1,775,266 records · observed through 2026-07-21T06:45:29.809Z27d65b0f-b718-4b4f-bb79-c47c68d09dfa
  • Cpe match643,502 records · observed through 2026-07-21T08:13:17.697Z955dae73-7302-438b-aee1-058d7cc5d48e

37 scope groups

GitHub_M · source assertederlangotpDirect source scope
Affected: >= OTP-27.0-rc1, < OTP-27.3.3Affected: >= OTP-26.0-rc1, < OTP-26.2.5.11Affected: < OTP-25.3.2.20
Source-reported scope

Canonical linkage remains open; the cited source assertion is retained below.

Inspect raw assertion[{"status": "affected", "version": ">= OTP-27.0-rc1, < OTP-27.3.3"}, {"status": "affected", "version": ">= OTP-26.0-rc1, < OTP-26.2.5.11"}, {"status": "affected", "version": "< OTP-25.3.2.20"}]
NVD CPE · APPLICATIONciscocloud_native_broadband_network_gatewayVulnerable target · 1 assertions
Any version (unconstrained) (< 2025.03.1)Canonical identity product-b5325f071e5ab20b1d3cff831519ab34d7d6f43f633acd85c318dab57048afd5Linked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:a:cisco:cloud_native_broadband_network_gateway:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    3 · node/0 · match 0
    Logic
    OR
    Version bounds
    through excluding 2025.03.1
    Match ID
    f813efb7-f2e8-4e36-bbf3-1fa1c2cb6035
NVD CPE · APPLICATIONciscoconfd_basicVulnerable target · 5 assertions
Any version (unconstrained) (< 7.7.19.1); Any version (unconstrained) (>= 8.0.18, < 8.1.16.2); Any version (unconstrained) (>= 8.2, < 8.2.11.1); Any version (unconstrained) (>= 8.3, < 8.3.8.1); Any version (unconstrained) (>= 8.4, < 8.4.4.1)Canonical identity product-8a5216c351a9013479c4f053df5dbe258a4ccc8de844fd5899a1cfca1f493288Linked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:a:cisco:confd_basic:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    1 · node/0 · match 2
    Logic
    OR
    Version bounds
    from including 8.2; through excluding 8.2.11.1
    Match ID
    4f1269b5-554f-42e0-95a1-bd22c5c23309
  2. cpe:2.3:a:cisco:confd_basic:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    1 · node/0 · match 1
    Logic
    OR
    Version bounds
    from including 8.0.18; through excluding 8.1.16.2
    Match ID
    8b6f7512-cac2-42de-b150-d56ae6f78053
  3. cpe:2.3:a:cisco:confd_basic:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    1 · node/0 · match 3
    Logic
    OR
    Version bounds
    from including 8.3; through excluding 8.3.8.1
    Match ID
    6d1c890c-d8ca-45fb-b70e-3960b0e9d41b
  4. cpe:2.3:a:cisco:confd_basic:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    1 · node/0 · match 0
    Logic
    OR
    Version bounds
    through excluding 7.7.19.1
    Match ID
    8fd911aa-c8f6-4109-a3b4-602aeaf2c77d
  5. cpe:2.3:a:cisco:confd_basic:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    1 · node/0 · match 4
    Logic
    OR
    Version bounds
    from including 8.4; through excluding 8.4.4.1
    Match ID
    37f31d4a-e5b4-4ed3-be3c-07ffa0f4d689
NVD CPE · APPLICATIONciscoenterprise_nfv_infrastructure_softwareVulnerable target · 1 assertions
Any version (unconstrained) (< 4.18)Canonical identity product-615fa95d879d242fe3f741353f300ef00b665c0205e82cec831e410d1678e2c0Linked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    6 · node/0 · match 0
    Logic
    OR
    Version bounds
    through excluding 4.18
    Match ID
    b41bd0fb-372f-418b-a453-232d04c7c055
NVD CPE · APPLICATIONciscoinode_managerVulnerable target · 1 assertions
Version not applicableCanonical identity product-d3c917bade1cfd9558b6c0e7a1c7cd64560d8204504dae9f0a99a86afe5a7981Linked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:a:cisco:inode_manager:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    3 · node/0 · match 1
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    ba1a6d3f-c7b9-415b-ae44-a263bfaa8b21
NVD CPE · HARDWAREcisconcs_1001Environmental constraint · 1 assertions
Version not applicableCanonical identity product-5f445b2969e0110bbf03d99116339eaf5ca03b9cf4b6579c3ad9a755bba8081aLinked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:ncs_1001:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    4 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    0f6e0fbe-70b7-413c-8943-39befe050298
NVD CPE · HARDWAREcisconcs_1002Environmental constraint · 1 assertions
Version not applicableCanonical identity product-62187a6fe2ea7936e1b134d4e2f80855cdc130468a376cee2c3f4247c398fc28Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:ncs_1002:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    4 · node/1 · match 1
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    37ae5fb0-d9a6-4ebe-9f7f-243299ae918b
NVD CPE · HARDWAREcisconcs_1004Environmental constraint · 1 assertions
Version not applicableCanonical identity product-c5173f456cc1b5360d4041a8e02b9a7eaebe804729c231286f7a17e060424e36Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:ncs_1004:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    4 · node/1 · match 2
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    60c9aaf8-4c5b-4ef5-b575-8235f3c54bcc
NVD CPE · OPERATING SYSTEMcisconcs_2000_shelf_virtualization_orchestrator_firmwareVulnerable target · 1 assertions
Any version (unconstrained) (< 25.1.1)Canonical identity product-4763e06a7e7f9adfea1212987143434e87c8468f35678ce6054d1c42b0337994Linked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:cisco:ncs_2000_shelf_virtualization_orchestrator_firmware:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    5 · node/0 · match 0
    Logic
    OR
    Version bounds
    through excluding 25.1.1
    Match ID
    3fba50a5-a1e7-41c4-ac8c-19a2393acf89
NVD CPE · HARDWAREcisconcs_2000_shelf_virtualization_orchestrator_moduleEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-5bedb46bc12101cc39137024838f96e5ef03331764554a9de71ac6f616169c1fLinked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:ncs_2000_shelf_virtualization_orchestrator_module:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    5 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    b66f36b9-0e4e-4ae0-9102-9b963c5e67d6
NVD CPE · APPLICATIONcisconetwork_services_orchestratorVulnerable target · 6 assertions
Any version (unconstrained) (< 5.7.19.1); Any version (unconstrained) (>= 5.8, < 6.1.16.2); Any version (unconstrained) (>= 6.2, < 6.2.11.1); Any version (unconstrained) (>= 6.3, < 6.3.8.1); Any version (unconstrained) (>= 6.4.2, < 6.4.4.1); Any version (unconstrained) (>= 6.4, < 6.4.1.1)Canonical identity product-77ac86a1cdfd36caabe1167a3f898fca8cd9dcf778b210d0ce2929245f6793d8Linked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:a:cisco:network_services_orchestrator:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    2 · node/0 · match 3
    Logic
    OR
    Version bounds
    from including 6.3; through excluding 6.3.8.1
    Match ID
    8b4ef3d5-5633-4c99-b4ae-360a2a3b985b
  2. cpe:2.3:a:cisco:network_services_orchestrator:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    2 · node/0 · match 0
    Logic
    OR
    Version bounds
    through excluding 5.7.19.1
    Match ID
    c911aa6c-9cd2-48f5-bc9b-a2d1aaceed03
  3. cpe:2.3:a:cisco:network_services_orchestrator:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    2 · node/0 · match 2
    Logic
    OR
    Version bounds
    from including 6.2; through excluding 6.2.11.1
    Match ID
    4c18189f-8645-4801-9217-b7a1e3539f89
  4. cpe:2.3:a:cisco:network_services_orchestrator:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    2 · node/0 · match 5
    Logic
    OR
    Version bounds
    from including 6.4.2; through excluding 6.4.4.1
    Match ID
    9dcc5384-91ef-44d6-908b-cc019036273a
  5. cpe:2.3:a:cisco:network_services_orchestrator:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    2 · node/0 · match 1
    Logic
    OR
    Version bounds
    from including 5.8; through excluding 6.1.16.2
    Match ID
    1a800c1c-ced2-4d88-add3-1705df8d1611
  6. cpe:2.3:a:cisco:network_services_orchestrator:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    2 · node/0 · match 4
    Logic
    OR
    Version bounds
    from including 6.4; through excluding 6.4.1.1
    Match ID
    553aee68-3fbe-453b-bd12-03faf3ba6f2c
NVD CPE · APPLICATIONciscooptical_site_managerVulnerable target · 1 assertions
Any version (unconstrained) (< 25.2.1)Canonical identity product-de0c14ba449b2e796a278e056bcdef832236b8ed32fde27e19a266c2e61e103eLinked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:a:cisco:optical_site_manager:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    4 · node/0 · match 0
    Logic
    OR
    Version bounds
    through excluding 25.2.1
    Match ID
    2a91eba2-5c6a-43d1-9657-e0b0b2d214f4
NVD CPE · HARDWAREciscorv160Environmental constraint · 1 assertions
Version not applicableCanonical identity product-be5317653ba493900b5fdfec94bb1d44fbea3cb0a3ebb1e52f0134c257e60428Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:rv160:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    9 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    ec1dc21d-8c6c-4ce7-b5cb-8646659b02bc
NVD CPE · OPERATING SYSTEMciscorv160_firmwareVulnerable target · 1 assertions
Version not applicableCanonical identity product-40d7c8c83552e9cda43f98f316a2d179088704b9997bb5546a8184030c9c1dc7Linked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:cisco:rv160_firmware:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    9 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    c2d5df69-3106-40b4-9dea-1655ec394e01
NVD CPE · HARDWAREciscorv160wEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-e5e6545254e2286a9a2e1d11243d802bcec65b9a44dd82a41b8401e0810e0484Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:rv160w:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    7 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    2b7e3792-5d0f-4ccc-874d-512059ca8e12
NVD CPE · OPERATING SYSTEMciscorv160w_firmwareVulnerable target · 1 assertions
Version not applicableCanonical identity product-4e6be043cabd5d32315286ac84934101b2f49234db76546138466294797212daLinked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:cisco:rv160w_firmware:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    7 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    e4c81717-86ca-4b78-b60b-1abea71d0243
NVD CPE · HARDWAREciscorv260Environmental constraint · 1 assertions
Version not applicableCanonical identity product-3f22297e81e562e02e367260ff460e620329406d39aa2e877f9f8bd6ef9bf11bLinked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:rv260:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    8 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    6ffc99c1-954e-408b-8a08-c79941350f05
NVD CPE · OPERATING SYSTEMciscorv260_firmwareVulnerable target · 1 assertions
Version not applicableCanonical identity product-f8d268f520ebb081325fe4e3a411c79a4f81075570cd81409da53789be6dd07fLinked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:cisco:rv260_firmware:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    8 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    b8b9d17f-a3e5-498d-9ae1-11915fef8b3b
NVD CPE · HARDWAREciscorv260pEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-46219fee3b1b7f85de73043f6649eeac76550d2a46470e80dcbed2231b83a1e9Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:rv260p:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    10 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    a62a6e2f-fa43-4f40-a684-651fedac2114
NVD CPE · OPERATING SYSTEMciscorv260p_firmwareVulnerable target · 1 assertions
Version not applicableCanonical identity product-efd140ff91647eefe49bf867490ad369abe91f6aa1ff0dea3cd456a4290e178aLinked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:cisco:rv260p_firmware:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    10 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    3ba3e845-95ec-4cad-8105-2348f8d58e3a
NVD CPE · HARDWAREciscorv260wEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-995c8f25e19b3102fa6689d2049f1154d78805baf5a0e9d960a7fe4c8f032debLinked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:rv260w:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    11 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    95737f9f-1779-4aab-875e-2cd586a8b780
NVD CPE · OPERATING SYSTEMciscorv260w_firmwareVulnerable target · 1 assertions
Version not applicableCanonical identity product-a98148fd1dd49d8980ff8ff433dd7d0ffcbddfeaeb00fda479b8009a8219b21fLinked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:cisco:rv260w_firmware:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    11 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    33291ce9-c896-4798-bad3-5aca2a412e92
NVD CPE · HARDWAREciscorv340Environmental constraint · 1 assertions
Version not applicableCanonical identity product-01da9ecb3b7fb6239b61273ac924db6cd0e5435e5d6f557ea75deb5af8badf46Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:rv340:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    12 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    2a4411ac-2a74-4315-ba6b-d7e1aa538bdb
NVD CPE · OPERATING SYSTEMciscorv340_firmwareVulnerable target · 1 assertions
Version not applicableCanonical identity product-71954f222fc60b05adc78354f4678f244dacb856ab960191a43d001deb6a3492Linked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:cisco:rv340_firmware:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    12 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    faa54684-d12c-4050-afd3-a1a3e2b6585f
NVD CPE · HARDWAREciscorv340wEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-78e7052fbdd34a64fcc429523fd631b36daa749def494082afe8b6ba2eb2a7b1Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:rv340w:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    13 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    21e55019-f969-4acd-a6c8-1d2ee05f8ee4

Affected-product evidence

Accepted scope and product mapping

23 canonical links · 1 source-reported links

Mapping establishedEvidence supported

vendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-0f19f6827197014555bc0aa145c4d688092afe7ed3f661c265356b1725f85dc3

Source class
Nvd cpe vulnerable target
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
83c4fad3-d543-4930-b4eb-fb2dd698eceb
Mapping establishedEvidence supported

vendor-66ae8c5e06427f7450637d18322b0dc411c0b469d940341cf076a620d444fe3c · product-3ccb4bc87dfae98fa2f2a06435fe5b3d9be78572fb958a89f2d7a96b4066447e

Source class
Nvd cpe vulnerable target
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
f4949073-3766-407d-9121-dc672dd797ab
Mapping establishedEvidence supported

vendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-40d7c8c83552e9cda43f98f316a2d179088704b9997bb5546a8184030c9c1dc7

Source class
Nvd cpe vulnerable target
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
204cc5bc-06d2-4eee-b980-54117c76be8c
Mapping establishedEvidence supported

vendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-43fc3587f631581dd54a8e2ac37352b7c73cc93e812d243b61f728b79251bf82

Source class
Nvd cpe vulnerable target
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
6112a39b-07a0-47d8-823e-d74bf48c8355
Mapping establishedEvidence supported

vendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-4763e06a7e7f9adfea1212987143434e87c8468f35678ce6054d1c42b0337994

Source class
Nvd cpe vulnerable target
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
b2e2360c-5643-4ca1-85df-5a3d1ffeb513
Mapping establishedEvidence supported

vendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-4e6be043cabd5d32315286ac84934101b2f49234db76546138466294797212da

Source class
Nvd cpe vulnerable target
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
d976c4e5-90ef-4760-89cb-1f74fd580a89
Mapping establishedEvidence supported

vendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-5002ed34e5eb2e27fed9178a222cfc152387cb8505c1d32996fbf758d01a3051

Source class
Nvd cpe vulnerable target
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
9112f712-e357-4514-a667-b17183afff8f
Mapping establishedEvidence supported

vendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-5e1cde70f742b76729b519508a0fe4364dbe44d10f6115294184fd02a8adc34b

Source class
Nvd cpe vulnerable target
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
960dc2b8-3ad7-41cf-98ab-57ee0466682d
Mapping establishedEvidence supported

vendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-615fa95d879d242fe3f741353f300ef00b665c0205e82cec831e410d1678e2c0

Source class
Nvd cpe vulnerable target
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
6436fc3d-535a-4851-919b-2a9f5dcdeebc
Mapping establishedEvidence supported

vendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-71954f222fc60b05adc78354f4678f244dacb856ab960191a43d001deb6a3492

Source class
Nvd cpe vulnerable target
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
8ee341ea-12ac-4cd0-a37e-1573b46d4b29
Mapping establishedEvidence supported

vendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-77ac86a1cdfd36caabe1167a3f898fca8cd9dcf778b210d0ce2929245f6793d8

Source class
Nvd cpe vulnerable target
Assertions
6
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
26bdc8bf-d221-4143-8816-ad89b5875dcb47d24cff-6f45-4bda-9b6b-326f4156635271b9d146-9dd6-492a-8324-647b6d1ebb7a99b52da3-c90d-4c97-b860-2a8c7ecf8ef7ed4b66e2-2ffa-4044-bd2a-c6972f0cfb1efe2b7027-1839-407f-882d-862b515c3056
Mapping establishedEvidence supported

vendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-8a5216c351a9013479c4f053df5dbe258a4ccc8de844fd5899a1cfca1f493288

Source class
Nvd cpe vulnerable target
Assertions
5
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
27e7cfc6-e090-4b2a-ad1e-4cdceeb4654238dcb885-54b8-4d22-a469-4024120a081268e35fde-bf30-4345-b81d-93a24cf66580b5741e2d-d043-4f3c-8afc-24b36e02bd4abf145c3a-9ec3-4c32-9a16-e7b91ea5a3e4
Mapping establishedEvidence supported

vendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-a98148fd1dd49d8980ff8ff433dd7d0ffcbddfeaeb00fda479b8009a8219b21f

Source class
Nvd cpe vulnerable target
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
ce20134b-7260-4e9b-8046-1731fcf7eb32
Mapping establishedEvidence supported

vendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-b2bd848ee20252dd968db368f43bf9a9616b6fc9f843e460c280475850181e13

Source class
Nvd cpe vulnerable target
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
12cc223c-f220-4680-be2b-2d72e23cd146
Mapping establishedEvidence supported

vendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-b5325f071e5ab20b1d3cff831519ab34d7d6f43f633acd85c318dab57048afd5

Source class
Nvd cpe vulnerable target
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
f82d06b4-6e23-4a1b-a702-adab5e28f941
Mapping establishedEvidence supported

vendor-fc296d62dcd07cd07dbcb2b644852c598212f088e6565b000ab0ade8b6d60f81 · product-c1a1cadff4ced53df327f7c35f4bdc5494035a3ea0fee86f2cdf5ee70e8e06a2

Source class
Nvd cpe vulnerable target
Assertions
3
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
1545c208-61b7-4e6f-8e57-9b61295f93125959352b-9f69-4798-ab7d-6ed6de38fd8562721c69-249b-4af2-af60-fdaecf40ec9c
Mapping establishedEvidence supported

vendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-c5059dfaedc43556329777513d6a91a13e8bdf3a045e87b008a3c7d02aecf58a

Source class
Nvd cpe vulnerable target
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
24be773f-5362-44d3-b948-139353731380
Mapping establishedEvidence supported

vendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-d00a4ed66467eec1cbfbb8d2557101bd67e14d5994ecac3d53d8ac4db1303fad

Source class
Nvd cpe vulnerable target
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
61fddfae-7f76-4237-9bd0-5bf19ab8a931
Mapping establishedEvidence supported

vendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-d3c917bade1cfd9558b6c0e7a1c7cd64560d8204504dae9f0a99a86afe5a7981

Source class
Nvd cpe vulnerable target
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
3fad3d3d-ff11-4b25-a7e0-0cf411740db6
Mapping establishedEvidence supported

vendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-de0c14ba449b2e796a278e056bcdef832236b8ed32fde27e19a266c2e61e103e

Source class
Nvd cpe vulnerable target
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
5e69a38f-9fcf-4659-b5a2-249216b7a7f8
Mapping establishedEvidence supported

vendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-efd140ff91647eefe49bf867490ad369abe91f6aa1ff0dea3cd456a4290e178a

Source class
Nvd cpe vulnerable target
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
abbe2e9a-5060-47ea-9159-dc56caa249e1
Mapping establishedEvidence supported

vendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-efdba365db4edc6e920e147bab176711e3e325f0c2e7433cb7a71fab7788f93a

Source class
Nvd cpe vulnerable target
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
4d5912fc-ac48-4ba9-82dc-b1200ab6d393
Mapping establishedEvidence supported

vendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-f8d268f520ebb081325fe4e3a411c79a4f81075570cd81409da53789be6dd07f

Source class
Nvd cpe vulnerable target
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
c13e8bc5-f752-466b-bbd4-24136eedbe29
Source-reported scopeSource-reported scope

Canonical linkage remains open; the cited source assertion is retained below.

Vendor specified only by source · Product specified only by source

Source class
Direct cve affected
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
5b582702-80e3-4645-bc28-ea88af2f3ca7

Assessments

CVSS by origin

10.0
security-advisories@github.comCVSS 3.1 · role Secondary · priority eligiblevalid_matchCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
10.0
GitHub_MCVSS 3.1 · role unknown · display onlyDirect record assessment retained outside normalized eligibilityCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Direct CVE/CNA normalized decisions

10.0Priority eligible

GitHub_M

CVSS 3.1 · Primary · Original assertion · rank 1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Validation
Valid match
Recomputed
10.0
Decision reason
Evidence supported
Policy
casca-direct-cvss-eligibility-v1

Assessments are retained side by side under closed precedence. Cascade never averages CVSS.

Evidence boundaries

  • KEV membership is authoritative for the catalog, not proof of exposure in any environment.
  • EPSS is a dated model probability and not an individual-environment prediction.
  • Affected or fixed status applies only to the exact cited product and version scope; remaining scope stays source-scoped.
  • NVD-carried upstream facts remain derivative; independent corroboration requires a separately authored source.
  • Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
  • NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
  • Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.
  • OSV aggregation and OSV-converted NVD material are not independent corroboration.
  • Red Hat facts are vendor assertions for the exact supplied products.
  • Nonmembership and not-yet-observed states are not proof of safety.