CVE-2025-53963: Thermofisher Ion Torrent Onetouch 2 Firmware

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices. They run an SSH server accessible over the default port 22. The root account has a weak default password of ionadmin, and a password change policy for the root account is not enforced. Thus, an attacker with network connectivity can achieve root code execution. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Affected products

• Thermofisher Ion Torrent Onetouch 2 Firmware: affected versions not specified

Published 2025-12-04. Last modified 2026-06-17.