CVE-2025-22939

The telnet service running on the Adtran 411 ONT device does not properly filter user-supplied input data, leading to a command injection vulnerability (CWE-77). An attacker can send crafted data containing malicious system commands that will be executed by the device in a privileged context. Exploitation of this vulnerability allows privilege escalation to root level without requiring any credentials.

An attacker gains full control of the device with root privileges, enabling execution of arbitrary system commands, modification of configuration, and potential further actions in the operator's or client's network.

Patches available from the manufacturer should be applied according to references. As an immediate protective measure, it is recommended to disable or block access to the telnet service on the device and restrict network access to the management interface only to trusted hosts.

Adtran 411 ONT with firmware version L80.00.0011.M2