# Raise3D Pro2 printers leak filesystem via debug port

Published: 2025-11-13 · Severity: routine · Sectors: manufacturing
Canonical: https://vorant.io/reports/96a2fc1f-e498-5a95-9e9c-3d3be8fe27b0/raise3d-pro2-printers-leak-filesystem-via-debug-port

> Authentication bypass in Raise3D Pro2 3D printers allows unauthenticated filesystem access when developer mode is enabled.

Raise3D Pro2 Series 3D printers contain an authentication bypass vulnerability (CVE-2025-10653) affecting all firmware versions. An unauthenticated debug port accessible over the network allows direct access to the device filesystem when developer mode is enabled, potentially enabling data exfiltration and device compromise. The vulnerability carries a CVSS v4 score of 8.8 (high severity) with network-based remote exploitation and low attack complexity. No public exploitation has been reported to CISA to date.

Raise3D has confirmed the vulnerability exists when developer mode is active and is developing a patched firmware version, though no release timeline has been provided. The vendor recommends disabling developer mode if not required. The devices are deployed worldwide in critical manufacturing environments. Defenders should immediately audit Pro2 printers for developer mode status, restrict network access to these devices, and isolate them from the internet and business networks where possible.

## Mentioned in this report

- Vulnerabilities: CVE-2025-10653

Source reporting: https://www.cisa.gov/news-events/ics-advisories/icsa-25-275-01

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/96a2fc1f-e498-5a95-9e9c-3d3be8fe27b0/raise3d-pro2-printers-leak-filesystem-via-debug-port.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup