Critical · published December 4, 2025
🚨 A weak default password is leaving the door wide open! The SSH server on Thermo Fisher Ion Torrent OneTouch 2 devices has a root account with the painfully simple password 'ionadmin'. 🔥 It's like having a bank vault with a combination lock set to '1234' — anyone with knowledge of the code can just stroll in and take everything they want! An attacker with access to the network can achieve full root code execution on the device, potentially leading to devastating consequences like unauthorized data access, manipulation of critical information, or even complete system takeover. The fact that this vulnerability affects unsupported products makes it even more alarming — the clock is ticking!
It's like having a bank vault with a combination lock set to '1234' — anyone with knowledge of the code can just stroll in and take everything they want! This vulnerability allows attackers to exploit the SSH server running on the default port 22 due to weak default password settings and the lack of enforced password policies for the root account. It's a recipe for disaster, enabling full control over the device.
An attacker with access to the network can achieve full root code execution on the device, potentially leading to devastating consequences like unauthorized data access, manipulation of critical information, or even complete system takeover. The fact that this vulnerability affects unsupported products makes it even more alarming — the clock is ticking! Immediately disable SSH access on the devices if possible, or change the default password to a strong, unique one. Since these devices are unsupported, consider replacing them with up-to-date models that receive regular security patches. 🛡️ You've got this! Strengthening security measures can lock out potential intruders in no time! 🦸