An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices. They run an SSH server accessible over the default port 22. The root account has a weak default password of ionadmin, and a password change policy for the root account is not enforced. Thus, an attacker with network connectivity can achieve root code execution. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Thu, 04 Dec 2025 21:45:00 +0000

Type Values Removed Values Added
First Time appeared Thermofisher
Thermofisher ion Torrent Onetouch 2
Vendors & Products Thermofisher
Thermofisher ion Torrent Onetouch 2

Thu, 04 Dec 2025 15:15:00 +0000

Type Values Removed Values Added
Description An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices. They run an SSH server accessible over the default port 22. The root account has a weak default password of ionadmin, and a password change policy for the root account is not enforced. Thus, an attacker with network connectivity can achieve root code execution. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2025-12-04T14:55:12.424Z

Reserved: 2025-07-16T00:00:00.000Z

Link: CVE-2025-53963

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-12-04T15:15:58.497

Modified: 2025-12-04T17:15:08.283

Link: CVE-2025-53963

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2025-12-04T21:37:54Z

Weaknesses

No weakness.