Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-11534

Authentication Bypass Using an Alternate Path or Channel in Raisecomm RAX701-GC Series

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The affected Raisecom devices allow SSH sessions to be established without completing user authentication. This could allow attackers to gain shell access without valid credentials.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Raisecomm RAX701-GC-WP-01 P200R002C52

Default version status: unaffected

  • Firmware version 5.5.27_20190111affected

Raisecomm RAX701-GC-WP-01 P200R002C53

Default version status: unaffected

  • Firmware version 5.5.13_20180720affected
  • Firmware version 5.5.36_20190709affected

References