CVE-2025-22937

An issue in Adtran 411 ONT vL80.00.0011.M2 allows attackers to escalate privileges via unspecified vectors

Critical · published March 31, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
45.5
In the wild
Unconfirmed
What it is

🚨 A sneaky privilege escalation awaits in Adtran 411 ONT vL80.00.0011.M2 — one misstep and an attacker could commandeer the whole system! 🔥 Think of this as a bouncer at a club who mistakenly lets someone into the VIP area without checking their ID — suddenly, they have access to everything without permission! If exploited, this vulnerability could allow an attacker to gain unauthorized access to sensitive functions and data, effectively turning them into the master of the system. Imagine the chaos if someone could change settings or control communications without a hitch! Absolutely devastating and critical to address.

Put simply

Think of this as a bouncer at a club who mistakenly lets someone into the VIP area without checking their ID — suddenly, they have access to everything without permission! This privilege escalation flaw in Adtran 411 ONT allows attackers to exploit unspecified vectors to elevate their access rights, causing a potential breach of security measures in place.

What to do

If exploited, this vulnerability could allow an attacker to gain unauthorized access to sensitive functions and data, effectively turning them into the master of the system. Imagine the chaos if someone could change settings or control communications without a hitch! Absolutely devastating and critical to address. Immediate action is needed! Update to the latest firmware provided by Adtran to eliminate this vulnerability. Regularly audit access controls to ensure that only authorized users have the necessary permissions on your network. You've got this! With these steps, you can fortify your defenses and keep your systems safe! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00554 · 45.5th percentile
Published
2025-03-31T00:00Z
EPSS history
Timeline
  • 31 MAR 00:00Z
    An issue in Adtran 411 ONT vL80.00.0011.M2 allows attackers to escalate privileges via unspecified vectors
    cvelistv5