CVE-2025-11534
Unknown Unknown - Not Provided

BaseFortify

Publication date: 2025-10-21

Last updated on: 2025-10-21

Assigner: ICS-CERT

Description
The affected Raisecom devices allow SSH sessions to be established without completing user authentication. This could allow attackers to gain shell access without valid credentials.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2025-10-21
Last Modified
2025-10-21
Generated
2026-07-06
AI Q&A
2025-10-21
EPSS Evaluated
2026-07-05
NVD
CVE-2025-11534
EUVD
EUVD-2025-35193

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
raisecom rax701 5.5.13_20180720
raisecom rax701 5.5.27_20190111
raisecom rax701 5.5.36_20190709

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-288 The product requires authentication, but the product has an alternate path or channel that does not require authentication.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows attackers to establish SSH sessions on affected Raisecom devices without completing user authentication, potentially granting shell access without valid credentials.

Impact Analysis

An attacker exploiting this vulnerability could gain unauthorized shell access to the affected devices, leading to potential control over the device, data breaches, or disruption of services.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-11534. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart