CVE-2025-11534 — Authentication Bypass Using an Alternate Path or Channel in Raisecomm RAX701-GC Series

CVE-2025-11534

Authentication Bypass Using an Alternate Path or Channel in Raisecomm RAX701-GC Series PUBLISHED

Description (CNA)

The affected Raisecom devices allow SSH sessions to be established without completing user authentication. This could allow attackers to gain shell access without valid credentials.

Affected (CNA)

Vendor / product	Versions
Raisecomm / RAX701-GC-WP-01 P200R002C52	affected Firmware version 5.5.27_20190111
Raisecomm / RAX701-GC-WP-01 P200R002C53	affected Firmware version 5.5.13_20180720; affected Firmware version 5.5.36_20190709

CWE

CWE-288

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-294-06
https://www.runzero.com/advisories/raisecom-ssh-bypass-cve-2025-11534/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.