PatchTheCVE411 firmware vulnerabilities and fixes
Recent CVEs affecting 411 firmware, with upgrade or downgrade steps. 5 tracked.
Also searched as: 411firmware.
411 firmware has 5 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-03-31. Highest priority: CVE-2025-22939 (score 69/100).
- CVE-2025-22941 CRITICAL 9.8 MITIGATE A command injection vulnerability in the web interface of Adtran 411 ONT L80.00.0011.M2 allows attackers to es
- CVE-2025-22940 CRITICAL 9.1 MITIGATE Incorrect access control in Adtran 411 ONT L80.00.0011.M2 allows unauthorized attackers to arbitrarily set the
- CVE-2025-22939 CRITICAL 9.8 MITIGATE A command injection vulnerability in the telnet service of Adtran 411 ONT L80.00.0011.M2 allows attackers to e
- CVE-2025-22938 CRITICAL 9.8 MITIGATE Adtran 411 ONT L80.00.0011.M2 was discovered to contain weak default passwords.
- CVE-2025-22937 CRITICAL 9.8 MITIGATE An issue in Adtran 411 ONT vL80.00.0011.M2 allows attackers to escalate privileges via unspecified vectors.
FAQ
How do I fix 411 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is 411 firmware being exploited right now?
None of the tracked 411 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which 411 firmware CVE should I patch first?
CVE-2025-22939 currently ranks highest (69/100): A command injection vulnerability in the telnet service of Adtran 411 ONT L80.00.0011.M2 allows attackers to e.