by Kastro
Paper/Archive/CVE-2025-11534

CVE-2025-11534

Raisecomm RAX701-GC-WP-01 P200R002C52 — Authentication Bypass Using an Alternate Path or Channel in Raisecomm RAX701-GC Series

EPSS 0.7%CVSS 9.3
critical.is priorityof 100
38
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 51.5.515 × 2010.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The affected Raisecom devices allow SSH sessions to be established without completing user authentication. This could allow attackers to gain shell access without valid credentials.

Affected

ProductAffectedFixed inSource
RAX701-GC-WP-01 P200R002C52Firmware version 5.5.27_20190111–CNA
RAX701-GC-WP-01 P200R002C53Firmware version 5.5.13_20180720–CNA
RAX701-GC-WP-01 P200R002C53Firmware version 5.5.36_20190709–CNA

Scores by source

icscert (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcisa.gov/news-events/ics-advisories/icsa-25-294-06writeuprunzero.com/advisories/raisecom-ssh-bypass-cve-2025-11534