Thermo Fisher Ion Torrent OneTouch 2 SSH Credential Vulnerability Allowing Root Code Execution

A vulnerability exists in the Thermo Fisher Ion Torrent OneTouch 2 system, specifically in devices with the catalog number INS1005527. These devices run an SSH server on the default port 22. The root account is protected by a weak default password, 'ionadmin', and there is no enforced password change policy for the root account. As a result, an attacker with network access can gain root privileges and execute code. This vulnerability affects only unsupported products.

Impact

Exploitation of this vulnerability allows for unauthorized root access and code execution on the affected device.

Remediation

Users are advised to change the default root password and review their network configuration to minimize exposure to this vulnerability. Additionally, ensure that the device is not connected to the public Internet without proper security measures, such as a firewall.