CVE-2025-22938

The vulnerability consists of the manufacturer using weak default passwords in the device firmware (CWE-1393). An attacker can attempt to log into the device using known or easily guessable default credentials that are common across all units of the given model. The attack requires no authentication, user interaction, or special privileges, and can be conducted remotely over the network.

A successful attack could allow an attacker to gain full control of the device, risking disclosure of confidential configuration data, modification of network settings, and disruption of services provided by the ISP operator.

Default passwords must be immediately changed to strong, unique credentials on all Adtran 411 ONT devices. Patches available from the manufacturer should be applied according to references, and network access to device management interfaces should be considered for restriction.

Adtran 411 ONT with firmware version L80.00.0011.M2