CVE-2025-22940

Incorrect access control in Adtran 411 ONT L80.00.0011.M2 allows unauthorized attackers to arbitrarily set the admin password.

Score

CVSS 3.1 9.1 Critical

Status

Modified - cve@mitre.org

Published

2025-03-31

Last modified

2025-08-18

Weaknesses

CWE-284

Affected products

• 411 Firmware (Adtran)

References

• https://drive.google.com/file/d/1levaZk5aC6g6a2zPW8xlOIVAu9MFYvAz/view
• https://lanrat.com/posts/adtran-isp-hacking/