Adtran 411 ONT Command Injection Vulnerability Allowing Privilege Escalation to Root

A command injection vulnerability has been identified in the web interface of the Adtran 411 ONT, specifically in firmware version L80.00.0011.M2. This vulnerability allows attackers to escalate privileges to root and execute arbitrary commands. The issue was discovered during a security audit, which also noted weak user passwords and the ability for unprivileged users to access a configuration file containing the admin password.

Impact

Exploitation of this vulnerability allows for unauthorized command execution with root privileges.

Remediation

Users can update to Adtran firmware version 24.3 to address this vulnerability.