CVE-2025-11534

Authentication Bypass Using an Alternate Path or Channel in Raisecomm RAX701-GC Series

State: Published
Severity: 9.3 Critical
Published: Oct 21, 2025
Updated: Oct 21, 2025
Reserved: Oct 8, 2025

Description

The affected Raisecom devices allow SSH sessions to be established without completing user authentication. This could allow attackers to gain shell access without valid credentials.

Scores

CVSS	Score	Vector	Source
4.0	9.3 Critical	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	icscert

Weaknesses

CWE-288 Authentication Bypass Using an Alternate Path or Channel

Affected Products

Product	Versions
RAX701-GC-WP-01 P200R002C52Raisecomm	Firmware version 5.5.27_20190111Affected
RAX701-GC-WP-01 P200R002C53Raisecomm	Firmware version 5.5.13_20180720Affected Firmware version 5.5.36_20190709Affected

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-294-06government-resource
https://www.runzero.com/advisories/raisecom-ssh-bypass-cve-2025-11534/third-party-advisorytechnical-description

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.