PatchTheCVEadtran vulnerabilities
Recent CVEs affecting adtran products. 10 tracked.
adtran has 10 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-03-31. Highest priority: CVE-2025-22939 (score 69/100).
- CVE-2025-22941 CRITICAL 9.8 MITIGATE A command injection vulnerability in the web interface of Adtran 411 ONT L80.00.0011.M2 allows attackers to es
- CVE-2025-22940 CRITICAL 9.1 MITIGATE Incorrect access control in Adtran 411 ONT L80.00.0011.M2 allows unauthorized attackers to arbitrarily set the
- CVE-2025-22939 CRITICAL 9.8 MITIGATE A command injection vulnerability in the telnet service of Adtran 411 ONT L80.00.0011.M2 allows attackers to e
- CVE-2025-22938 CRITICAL 9.8 MITIGATE Adtran 411 ONT L80.00.0011.M2 was discovered to contain weak default passwords.
- CVE-2025-22937 CRITICAL 9.8 MITIGATE An issue in Adtran 411 ONT vL80.00.0011.M2 allows attackers to escalate privileges via unspecified vectors.
- CVE-2024-39345 HIGH 7.2 UPGRADE AdTran 834-5 HDC17600021F1 (SmartOS 11.1.1.1) devices enable the SSH service by default and have a hidden, und
- CVE-2024-31977 HIGH 8.8 UPGRADE MITIGATE Adtran 834-5 11.1.0.101-202106231430, and fixed as of SmartOS Version 12.6.3.1, devices allow OS Command Injec
- CVE-2024-31971 MEDIUM 4.8 MITIGATE Multiple stored cross-site scripting (XSS) vulnerabilities on AdTran NetVanta 3120 18.01.01.00.E devices allow
- CVE-2024-31970 HIGH 8.8 UPGRADE AdTran SRG 834-5 HDC17600021F1 devices (with SmartOS 11.1.1.1 and fixed in Version 12.1.3.1) have SSH enabled
- CVE-2023-38120 HIGH 8.8 MITIGATE Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability
FAQ
How do I fix adtran vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is adtran being exploited right now?
None of the tracked adtran CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which adtran CVE should I patch first?
CVE-2025-22939 currently ranks highest (69/100): A command injection vulnerability in the telnet service of Adtran 411 ONT L80.00.0011.M2 allows attackers to e.