Back to search
CVE-2025-11534
Published: Oct 21, 2025
Modified: Oct 21, 2025
PUBLISHED
Description
The affected Raisecom devices allow SSH sessions to be established without completing user authentication. This could allow attackers to gain shell access without valid credentials.
| Vendor | Product | Versions |
|---|---|---|
Raisecomm | RAX701-GC-WP-01 P200R002C52 | affected Firmware version 5.5.27_20190111 |
Raisecomm | RAX701-GC-WP-01 P200R002C53 | affected Firmware version 5.5.13_20180720affected Firmware version 5.5.36_20190709 |
Weaknesses (CWE)
References
https://www.cisa.gov/news-events/ics-advisories/icsa-25-294-06
government-resource
https://www.runzero.com/advisories/raisecom-ssh-bypass-cve-2025-11534/
third-party-advisory
technical-description
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now