CVE-2025-22941

A command injection vulnerability in the web interface of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate privileges to root and execute arbitrary commands.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

2.23% chance of exploitation in the next 30 days, 82th percentile

Published

2025-03-31

Updated

2025-08-18

Proof-of-concept exploits (1)

• https://drive.google.com/file/d/1levaZk5aC6g6a2zPW8xlOIVAu9MFYvAz/view

References

• CVE Record
• NVD entry

Related

• CVE-2025-22940
• CVE-2025-22952
• CVE-2025-2294
• CVE-2025-22953
• CVE-2025-22938
• CVE-2025-22954