Vulnerability in Raisecomm Rax701-Gc-Wp-01 P200r002c52

CVE-2025-11534

The affected Raisecom devices allow SSH sessions to be established without completing user authentication. This could allow attackers to gain shell access without valid credentials.

EPSS: 0.008 (52.8th percentile) — read the EPSS interpretation.

Affected products

Raisecomm Rax701-gc-wp-01 P200r002c52 — versions Firmware version 5.5.27_20190111
Raisecomm Rax701-gc-wp-01 P200r002c53 — versions Firmware version 5.5.13_20180720, Firmware version 5.5.36_20190709

Weakness classification (CWE)

CWE-288 — Authentication Bypass Using an Alternate Path or Channel

References

ics-cert@hq.dhs.gov (government-resource)
ics-cert@hq.dhs.gov (technical-description, third-party-advisory)