CISA Warns: Critical Raisecom Router Flaw (CVE-2025-11534, CVSS 9.8) Allows Unauthenticated Root SSH Access

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert about a critical authentication bypass affecting Raisecom RAX701-GC routers used in industrial and telecom environments, tracked as CVE-2025-11534 with a CVSS v3.1 base score of 9.8, enabling unauthenticated attackers to gain root shell access via SSH.

The flaw allows SSH sessions to be established without completing user authentication, and affects firmware versions P200R002C52 (5.5.27_20190111) and P200R002C53 (5.5.13_20180720 and 5.5.36_20190709) on the RAX701-GC-WP-01. The issue was discovered by HD Moore of runZero, with Tod Beardsley of runZero reporting it to CISA for coordinated disclosure; as of the latest advisory, Raisecom has not responded to requests for collaboration on mitigations or a patch.

In the absence of a vendor fix, CISA recommends immediate network-level mitigations, including minimising exposure of control system devices, locating them behind firewalls, using secure remote access methods such as VPNs, and monitoring for unauthorized SSH connections. The article notes there have been no reported exploitations at the time of writing, but emphasises the urgency due to the ease of remote exploitation and the high privileges granted.