CVE-2025-11534

Authentication Bypass Using an Alternate Path or Channel in Raisecomm RAX701-GC Series

CVSS 9.3 CRITICALEPSS 0.8%CWE-288

Vexday Risk Score

28Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 9.3EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

21 oct 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

The affected Raisecom devices allow SSH sessions to be established without completing user authentication. This could allow attackers to gain shell access without valid credentials.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Productos afectados

Raisecomm · RAX701-GC-WP-01 P200R002C52 Raisecomm · RAX701-GC-WP-01 P200R002C53

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://www.cisa.gov/news-events/ics-advisories/icsa-25-294-06 https://www.runzero.com/advisories/raisecom-ssh-bypass-cve-2025-11534/