Critical severity · published Oct 21, 2025
CVE-2025-11534
Authentication Bypass Using an Alternate Path or Channel in Raisecomm RAX701-GC Series
9.3
CVSS
0.7%
EPSS
No
On KEV
Description
The affected Raisecom devices allow SSH sessions to be established without completing user authentication. This could allow attackers to gain shell access without valid credentials.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 51% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RP
RAX701-GC-WP-01 P200R002C52 · Raisecomm
Firmware version 5.5.27_20190111 · source: vendor
RP
RAX701-GC-WP-01 P200R002C53 · Raisecomm
Firmware version 5.5.13_20180720; Firmware version 5.5.36_20190709 · source: vendor