CVE-2025-11534CWE-288

CVE-2025-11534

published October 21, 2025

CVSS
9.3
EPSS
1%
Percentile
50.9
In the wild
Unconfirmed
What it is

The affected Raisecom devices allow SSH sessions to be established without completing user authentication. This could allow attackers to gain shell access without valid credentials.

The record
Technical detail
CVSS
9.3 · NONE
CVSS v4.0
Not supplied
EPSS
0.00658 · 50.9th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2025-10-21T21:15Z
References (2)
https://www.cisa.gov/news-events/ics-advisories/icsa-25-294-06 · [email protected]https://www.runzero.com/advisories/raisecom-ssh-bypass-cve-2025-11534/ · [email protected]
EPSS history
Timeline
  • 21 OCT 16:59Z
    Authentication Bypass Using an Alternate Path or Channel in Raisecomm RAX701-GC Series
    cvelistv5