CVE-2025-22940

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-22940
Incorrect access control in Adtran 411 ONT L80.00.0011.M2 allows unauthorized attackers to arbitrarily set the admin password.

9.1 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://drive.google.com/file/d/1levaZk5aC6g6a2zPW8xlOIVAu9MFYvAz/view Exploit Third Party Advisory
https://lanrat.com/posts/adtran-isp-hacking/
https://drive.google.com/file/d/1levaZk5aC6g6a2zPW8xlOIVAu9MFYvAz/view Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:adtran:411_firmware:l80.00.0011.m2:*:*:*:*:*:*:*
cpe:2.3:h:adtran:411:-:*:*:*:*:*:*:*
History

18 Aug 2025, 17:15

Type Values Removed Values Added
References
  • () https://lanrat.com/posts/adtran-isp-hacking/ -
References () https://drive.google.com/file/d/1levaZk5aC6g6a2zPW8xlOIVAu9MFYvAz/view - Third Party Advisory, Exploit () https://drive.google.com/file/d/1levaZk5aC6g6a2zPW8xlOIVAu9MFYvAz/view - Exploit, Third Party Advisory

20 Jun 2025, 15:30

Type Values Removed Values Added
References () https://drive.google.com/file/d/1levaZk5aC6g6a2zPW8xlOIVAu9MFYvAz/view - () https://drive.google.com/file/d/1levaZk5aC6g6a2zPW8xlOIVAu9MFYvAz/view - Third Party Advisory, Exploit
Summary
  • (es) El control de acceso incorrecto en Adtran 411 ONT L80.00.0011.M2 permite que atacantes no autorizados establezcan arbitrariamente la contraseña de administrador.
First Time Adtran 411
Adtran
Adtran 411 Firmware
CPE cpe:2.3:o:adtran:411_firmware:l80.00.0011.m2:*:*:*:*:*:*:*
cpe:2.3:h:adtran:411:-:*:*:*:*:*:*:*

01 Apr 2025, 14:15

Type Values Removed Values Added
CWE CWE-284
References () https://drive.google.com/file/d/1levaZk5aC6g6a2zPW8xlOIVAu9MFYvAz/view - () https://drive.google.com/file/d/1levaZk5aC6g6a2zPW8xlOIVAu9MFYvAz/view -
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.1

31 Mar 2025, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-03-31 15:15

Updated : 2025-08-18 17:15

NVD link : CVE-2025-22940

Mitre link : CVE-2025-22940

CVE.ORG link : CVE-2025-22940

JSON object : View

Products Affected

adtran

  • 411_firmware
  • 411
CWE
CWE-284

Improper Access Control