CVE-2025-11534
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-10-21

Last updated on: 2025-10-21

Assigner: ICS-CERT

Description
The affected Raisecom devices allow SSH sessions to be established without completing user authentication. This could allow attackers to gain shell access without valid credentials.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-10-21
Last Modified
2025-10-21
Generated
2026-06-16
AI Q&A
2025-10-21
EPSS Evaluated
2026-06-15
NVD
CVE-2025-11534
EUVD
EUVD-2025-35193
Affected Vendors & Products
Showing 3 associated CPEs
Vendor Product Version / Range
raisecom rax701 5.5.13_20180720
raisecom rax701 5.5.27_20190111
raisecom rax701 5.5.36_20190709
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-288 The product requires authentication, but the product has an alternate path or channel that does not require authentication.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability allows attackers to establish SSH sessions on affected Raisecom devices without completing user authentication, potentially granting shell access without valid credentials.

Impact Analysis

An attacker exploiting this vulnerability could gain unauthorized shell access to the affected devices, leading to potential control over the device, data breaches, or disruption of services.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-11534. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart