Critical · 9.3 CVE-2025-11534 EUVD-2025-35193GHSA-xw62-rx45-hvr3

Authentication Bypass Using an Alternate Path or Channel in Raisecomm RAX701-GC Series

Published Oct 21, 2025 · Updated Oct 21, 2025 · Assigned by icscert

Vendor: Raisecomm Product: RAX701-GC-WP-01 P200R002C52 Product: RAX701-GC-WP-01 P200R002C53

Description

The affected Raisecom devices allow SSH sessions to be established without completing user authentication. This could allow attackers to gain shell access without valid credentials.

Affected products

Vendor	Product	Affected	Fixed
Raisecomm	RAX701-GC-WP-01 P200R002C52	Firmware version 5.5.27_20190111	—
Raisecomm	RAX701-GC-WP-01 P200R002C53	Firmware version 5.5.13_20180720, Firmware version 5.5.36_20190709	—

Advisories 1

ICSA-25-294-06 Raisecomm RAX701-GC Series CISA ICS & IT advisories · Oct 21, 2025

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-294-06 government-resource
https://www.runzero.com/advisories/raisecom-ssh-bypass-cve-2025-11534/ third-party-advisory technical-description