CVE-2025-53963

Critical

Published: 04/12/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices run an SSH server on default port 22. The root account has a weak default password of ionadmin, and a password change policy for the root account is not enforced. An attacker with network connectivity can achieve root code execution.

Risk Assessment

Weak default root password allows unauthorized remote access with full privileges. This affects unsupported products, increasing the risk of no patch being available.

Recommendation

Immediately change the default root password on all devices and restrict SSH access to trusted networks only. Consider disabling SSH if not required.

Original NVD description (English source)

An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices. They run an SSH server accessible over the default port 22. The root account has a weak default password of ionadmin, and a password change policy for the root account is not enforced. Thus, an attacker with network connectivity can achieve root code execution. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.