CVE-2025-22939

A command injection vulnerability in the telnet service of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate privileges to root and execute arbitrary…

Critical · published March 31, 2025

CVSS v3.1
9.8
EPSS
3%
Percentile
85.4
In the wild
Unconfirmed
What it is

🚨 A command injection vulnerability lurking in the telnet service of the Adtran 411 ONT could let attackers unleash mayhem as root! ⚡ Think of this as a hotel where a guest finds a way to sneak into the management office and access every single room without any keycard — a truly shocking breach of trust! 🏨 With the ability to execute arbitrary commands, an attacker could take complete control of the device. This means they could maneuver through the system, steal sensitive data, or even bring everything to a grinding halt. It’s absolutely devastating! 🔥

Put simply

Think of this as a hotel where a guest finds a way to sneak into the management office and access every single room without any keycard — a truly shocking breach of trust! 🏨 This vulnerability stems from a flaw in the telnet service that allows command injection, enabling an attacker to gain escalated privileges to root. By exploiting this weakness, they can run any command on the system, effectively hijacking it.

What to do

With the ability to execute arbitrary commands, an attacker could take complete control of the device. This means they could maneuver through the system, steal sensitive data, or even bring everything to a grinding halt. It’s absolutely devastating! 🔥 To safeguard your systems, immediately patch this vulnerability to version L80.00.0012 or later. Also, consider disabling the telnet service entirely in favor of more secure alternatives like SSH. Regularly audit your devices to ensure no unauthorized access! 🛡️ You’ve got this! With these steps, you can fortify your defenses and keep those pesky attackers at bay! 💪✨

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02626 · 85.4th percentile
Published
2025-03-31T00:00Z
EPSS history
Timeline
  • 31 MAR 00:00Z
    A command injection vulnerability in the telnet service of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate privileges to root and execute arbitrary…
    cvelistv5