CVE-2025-53963

The device runs an SSH server listening on port 22 with a root account secured by the default password 'ionadmin'. Password change policy for the root account is not enforced, meaning the password can remain unchanged throughout the device's lifecycle. An attacker with network access to the device can log in via SSH using known, default credentials and obtain full root privileges without any additional escalation.

An attacker gains unlimited access to the system shell with root privileges, enabling complete device takeover, arbitrary code execution (RCE), data modification, and potential use of the device as an entry point to the laboratory network.

The manufacturer no longer issues updates for this product (no support). Recommended immediate actions: immediately change the default root password 'ionadmin' to a strong, unique password; isolate the device from public networks and unauthorized network segments (e.g., via firewall or VLAN); restrict access to port 22 only to trusted IP addresses; consider discontinuing the device and replacing it with a supported model.

Thermo Fisher Ion Torrent OneTouch 2 devices (model INS1005527) with Ion Torrent OneTouch 2 firmware. The vulnerability only affects products that are no longer supported by the manufacturer.