Adtran vulnerabilities
We track 6 vulnerabilities in Adtran products across 5 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on March 31, 2025.
Latest Adtran vulnerabilities
- 9.8 Critical severity
411 Firmware: Improper Neutralization of Special Elements used in a Command
A command injection vulnerability in the web interface of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate privileges to root and execute arbitrary commands.
- 9.8 Critical severity
411 Firmware: Improper Neutralization of Special Elements used in a Command
A command injection vulnerability in the telnet service of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate privileges to root and execute arbitrary commands.
- 8.8 High severity
834-5_firmware: Incorrect Authorization
AdTran SRG 834-5 HDC17600021F1 devices (with SmartOS 11.1.1.1 and fixed in Version 12.1.3.1) have SSH enabled by default, accessible both over the LAN and the Internet. During a window of time when the device is being set up, it uses a default username and pas
- 7.2 High severity
834-5_firmware: Improper Neutralization of Special Elements used in an OS Command
AdTran 834-5 HDC17600021F1 (SmartOS 11.1.1.1) devices enable the SSH service by default and have a hidden, undocumented, hard-coded support account whose password is based on the devices MAC address. All of the devices internet interfaces share a similar MAC a
- 8.8 High severity
834-5_firmware: Improper Neutralization of Special Elements used in an OS Command
Adtran 834-5 11.1.0.101-202106231430, and fixed as of SmartOS Version 12.6.3.1, devices allow OS Command Injection via shell metacharacters to the Ping or Traceroute utility.
- 8.8 High severity
SR400ac: Improper Neutralization of Special Elements used in a Command
Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adtran SR400ac routers. Although authentication is required to exploit this vulnerabili