Adtran 411 ONT Incorrect Access Control Vulnerability Allowing Unauthorized Password Changes
Vulnerability
A vulnerability in the Adtran 411 ONT, specifically in firmware version L80.00.0011.M2, has been identified that allows unauthorized attackers to arbitrarily change the admin password. This issue arises from incorrect access control, enabling unprivileged users to modify admin account credentials. Additionally, the vulnerability allows any user account to access and dump a configuration file containing the admin password.
Impact
Exploitation of this vulnerability could lead to unauthorized users gaining administrative access by changing the admin password, potentially allowing further exploitation of the device or network.
Remediation
Users are advised to update to version 24.3, where this vulnerability has been addressed.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.