SSH Server Weak Password Vulnerability in Thermo Fisher Ion Torrent OneTouch 2

CVE-2025-53963

What is CVE-2025-53963?

A significant security issue affects the Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices, where an SSH server exposed on the default port 22 can be exploited. The root account has a weak default password (ionadmin), combined with a lack of enforced password change policies, allowing an attacker with network access to gain root code execution. It is important to note that this vulnerability pertains only to products no longer supported by the vendor.

References