Adtran 411 ONT Telnet Command Injection Vulnerability Allowing Privilege Escalation to Root

A command injection vulnerability has been identified in the telnet service of the Adtran 411 ONT, specifically in firmware version L80.00.0011.M2. This vulnerability allows attackers to escalate privileges to root and execute arbitrary commands. The issue was discovered during a security audit, which also noted weak user passwords and additional command injection vulnerabilities in the web interface.

Impact

Exploitation of this vulnerability allows for unauthorized command execution with root privileges, potentially leading to full control over the affected device.

Remediation

Users are advised to update to version 24.3, where this vulnerability has been addressed.