CVE-2025-40913: ATRODO Net::Dropbear · Dependency on Vulnerable Third-Party Component
Affects ATRODO Net::DropbearSource CVE Database V5
Mentioned vulnerabilities
Not known to be exploited · CVSS 6.5 Medium.
Data as of 27 Oct 2026, 05:11 UTC
- EPSS
- 0.3% chance of exploitation in 30 days – higher than 25% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NExploitation evidence
Disclosed: evidence found.
CVE published 16 Jul 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| ATRODO Net::Dropbear | Affected
| Fixed in– |
AI-suggested
- Inventory and Audit: European organizations should conduct a thorough inventory of their Perl modules and applications to identify any use of Net::Dropbear, especially versions up to 0.16.
- Vendor Monitoring: Continuously monitor ATRODO's official channels and CPAN security advisories for patches or updates addressing this vulnerability.
- Dependency Management: Where possible, replace or upgrade the embedded libtommath library to a version that is not vulnerable to CVE-2023-36328. If direct upgrade is not feasible, consider isolating or sandboxing the affected components to limit impact.
- Code Review: Perform security code reviews on any custom applications using Net::Dropbear to identify potential exploitation vectors and implement input validation to prevent triggering the integer overflow.
- Network Controls: Restrict access to services using Net::Dropbear to trusted networks and implement intrusion detection systems to monitor for anomalous activity that could indicate exploitation attempts.
- Incident Response Preparation: Prepare incident response plans specific to potential exploitation scenarios involving this vulnerability, including forensic readiness and containment strategies.
- Alternative Solutions: Evaluate the feasibility of migrating to alternative SSH implementations or Perl modules that do not rely on vulnerable dependencies, reducing the attack surface.
Description
Net::Dropbear versions through 0.16 for Perl contains a dependency that may be susceptible to an integer overflow. Net::Dropbear embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328.