CVE-2025-22941

The vulnerability (CWE-77) consists of insufficient input validation in the device's web interface, allowing an attacker to inject malicious system commands. A specially crafted HTTP request sent remotely, without any authentication, is processed by the web application in a way that enables execution of embedded commands with the privileges of the process handling the request. As a result, the attacker can escalate their privileges to root level on the vulnerable device.

The attacker gains full control of the device with root privileges, enabling configuration reading and modification, installation of malicious software, disruption of network service availability, and use of the device as an entry point to the operator's or subscriber's network.

Apply patches available from the manufacturer according to the references. Until updates are implemented, it is recommended to restrict access to the device's web interface exclusively to trusted management networks and implement firewall rules blocking unauthorized access to the administration panel.

Adtran 411 ONT with firmware version L80.00.0011.M2