CVE-2025-54304 is a critical vulnerability affecting Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices, where an exposed X11 display server can be accessed over port 6000 on all network interfaces. This misconfiguration, particularly when DHCP assigns an IP other than the default 192.168.2.15, allows remote attackers to gain root privileges and execute arbitrary code. With a CVSS score of 9.8 (CRITICAL), the vulnerability has a low attack complexity and no user interaction required, leading to complete compromise of confidentiality, integrity, and availability. While no public exploits, Metasploit modules, or social media discussions are currently available, it's important to note that this vulnerability affects unsupported products.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:thermofisher:ion_torrent_onetouch_2_firmware:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.