CVE-2025-22941

A command injection vulnerability in the web interface of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate privileges to root and execute arbitrary…

Critical · published March 31, 2025

CVSS v3.1
9.8
EPSS
2%
Percentile
82.7
In the wild
Unconfirmed
What it is

🚨 A crafty command injection vulnerability in Adtran 411 ONT opens the door for attackers to escalate privileges to root with ease! 🔥 Think of it like a restaurant worker who can bypass security measures and access the kitchen without showing a badge – they could whip up anything they want, from secret recipes to tampering with menus. That's what this flaw allows in your network! An attacker could exploit this vulnerability to gain root access, executing arbitrary commands that could compromise your entire system. Imagine someone not just entering the kitchen, but taking complete control, altering your recipes, and serving up chaos to all your patrons! This could lead to data breaches, service disruptions, and loss of critical information.

Put simply

Think of it like a restaurant worker who can bypass security measures and access the kitchen without showing a badge – they could whip up anything they want, from secret recipes to tampering with menus. That's what this flaw allows in your network! This command injection vulnerability in the web interface of Adtran 411 ONT permits unauthorized users to escalate their privileges and run arbitrary system commands, bypassing standard security controls.

What to do

An attacker could exploit this vulnerability to gain root access, executing arbitrary commands that could compromise your entire system. Imagine someone not just entering the kitchen, but taking complete control, altering your recipes, and serving up chaos to all your patrons! This could lead to data breaches, service disruptions, and loss of critical information. Immediate action is needed: update to the latest firmware version that addresses this vulnerability. Monitor your system for any unusual activity and consider implementing additional security measures to safeguard your network. You've got this! Take these steps to secure your system and protect your network from potential threats. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02235 · 82.7th percentile
Published
2025-03-31T00:00Z
EPSS history
Timeline
  • 31 MAR 00:00Z
    A command injection vulnerability in the web interface of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate privileges to root and execute arbitrary…
    cvelistv5