← back
CVE-2025-11534

Authentication Bypass Using an Alternate Path or Channel in Raisecomm RAX701-GC Series

CVSS 9.3 CRITICALEPSS 0.8%CWE-288
Vexday Risk Score
28Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 9.3EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
21 Oct 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The affected Raisecom devices allow SSH sessions to be established without completing user authentication. This could allow attackers to gain shell access without valid credentials.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Raisecomm · RAX701-GC-WP-01 P200R002C52Raisecomm · RAX701-GC-WP-01 P200R002C53

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://www.cisa.gov/news-events/ics-advisories/icsa-25-294-06https://www.runzero.com/advisories/raisecom-ssh-bypass-cve-2025-11534/