Adtran 411 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Adtran 411 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2025-22937 — CVSS 9.8 (critical): An issue in Adtran 411 ONT vL80.00.0011.M2 allows attackers to escalate privileges via unspecified vectors.
• CVE-2025-22938 — CVSS 9.8 (critical): Adtran 411 ONT L80.00.0011.M2 was discovered to contain weak default passwords.
• CVE-2025-22939 — CVSS 9.8 (critical): A command injection vulnerability in the telnet service of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate privileges to root…
• CVE-2025-22941 — CVSS 9.8 (critical): A command injection vulnerability in the web interface of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate privileges to root and…
• CVE-2025-22940 — CVSS 9.1 (critical): Incorrect access control in Adtran 411 ONT L80.00.0011.M2 allows unauthorized attackers to arbitrarily set the admin password.