Adtran

20 CVEs across 20 Adtran products. Browse Adtran vulnerabilities, severities, and proof-of-concept exploits.

Adtran products with known CVEs

ProductCVEs
4115
411 Firmware5
Netvanta 70604
Netvanta 71004
834-53
Netvanta3
Personal Phone Manager3
Sdg Smartos3
834-5 Firmware1
Aos1
Mx28001
Netvanta 31201
Netvanta 3120 Firmware1
Pmaa1
Sr400ac1
Sr400ac Firmware1
Sr506n1
Sr506n Firmware1
Sr510n1
Sr510n Firmware1
Adtran CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-22941Critical9.82025-03-31A command injection vulnerability in the web interface of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate privileges to root and execute arbitrary c…
CVE-2025-22940Critical9.12025-03-31Incorrect access control in Adtran 411 ONT L80.00.0011.M2 allows unauthorized attackers to arbitrarily set the admin password.
CVE-2025-22939Critical9.82025-03-31A command injection vulnerability in the telnet service of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate privileges to root and execute arbitrary…
CVE-2025-22938Critical9.82025-03-31Adtran 411 ONT L80.00.0011.M2 was discovered to contain weak default passwords.
CVE-2025-22937Critical9.82025-03-31An issue in Adtran 411 ONT vL80.00.0011.M2 allows attackers to escalate privileges via unspecified vectors.
CVE-2024-31970High8.82024-07-24AdTran SRG 834-5 HDC17600021F1 devices (with SmartOS 11.1.1.1 and fixed in Version 12.1.3.1) have SSH enabled by default, accessible both over the LAN and the…
CVE-2024-39345High7.22024-07-24AdTran 834-5 HDC17600021F1 (SmartOS 11.1.1.1) devices enable the SSH service by default and have a hidden, undocumented, hard-coded support account whose passw…
CVE-2024-31977High8.82024-07-24Adtran 834-5 11.1.0.101-202106231430, and fixed as of SmartOS Version 12.6.3.1, devices allow OS Command Injection via shell metacharacters to the Ping or Trac…
CVE-2024-31971Medium4.82024-07-24Multiple stored cross-site scripting (XSS) vulnerabilities on AdTran NetVanta 3120 18.01.01.00.E devices allow remote attackers to inject arbitrary JavaScript…
CVE-2023-38120High8.82024-05-03Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected ins…
CVE-2022-37661Critical9.82022-09-14SmartRG SR506n 2.5.15 and SR510n 2.6.13 routers are vulnerable to Remote Code Execution (RCE) via the ping host feature.
CVE-2021-25681High7.52021-04-20AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration of data over DNS. This could allow for exposed AdTran Pers…
CVE-2021-25680Medium6.12021-04-20The AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting (XSS) issues. These issues impact at minimum versions 10.8…
CVE-2021-25679Medium5.42021-04-20The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting (XSS) issues. These issues impact at minimum versions…
CVE-2018-19648High8.82019-03-27An issue was discovered in ADTRAN PMAA 1.6.2-1, 1.6.3, and 1.6.4. NETCONF Access Management (NACM) allows unprivileged users to create privileged users and exe…
CVE-2013-52102013-12-30Cross-site scripting (XSS) vulnerability in the GUI login page in ADTRAN AOS before R10.8.1 on the NetVanta 7100 allows remote attackers to inject arbitrary we…
CVE-2005-45662005-12-29Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in ADTRAN NetVanta before 10.03.03.E might allow remote attackers to have an unkn…
CVE-2005-45652005-12-29Format string vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation in ADTRAN NetVanta before 10.03.03.E might allow remote attackers to…
CVE-2005-45642005-12-29The Internet Key Exchange version 1 (IKEv1) implementation in ADTRAN NetVanta before 10.03.03.E might allow remote attackers to cause a denial of service via c…
CVE-2000-02922000-04-19The Adtran MX2800 M13 Multiplexer allows remote attackers to cause a denial of service via a ping flood to the Ethernet interface, which causes the device to c…