Skip to content
Noroxi

Adtran records

21 published records for vendor adtran.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
4.8%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 21
  3. 22
  4. 24
  5. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

21 records
  • CVE-2022-37661
    49Plan

    SmartRG SR506n 2.5.15 and SR510n 2.6.13 routers are vulnerable to Remote Code Execution (RCE) via the ping host feature.

    CriticalCVSS 9.8Proof of conceptEPSS 34%

    adtran · sr510n firmwareSep 14, 2022

  • CVE-2005-4566
    41Plan

    Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in ADTRAN NetVanta before 10.03.03.E might allow remote attack

    CriticalCVSS 10.0No exploitEPSS 2%

    adtran · netvantaDec 29, 2005

  • CVE-2005-4565
    41Plan

    Format string vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation in ADTRAN NetVanta before 10.03.03.E might allow r

    CriticalCVSS 10.0No exploitEPSS 2%

    adtran · netvantaDec 29, 2005

  • CVE-2025-22939
    40Plan

    A command injection vulnerability in the telnet service of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate privileges to root and

    CriticalCVSS 9.8No exploitEPSS 2%

    adtran · 411 firmwareMar 31, 2025

  • CVE-2025-22941
    40Plan

    A command injection vulnerability in the web interface of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate privileges to root and

    CriticalCVSS 9.8No exploitEPSS 2%

    adtran · 411 firmwareMar 31, 2025

  • CVE-2025-22938
    39Monitor

    Adtran 411 ONT L80.00.0011.M2 was discovered to contain weak default passwords.

    CriticalCVSS 9.8No exploitEPSS 0%

    adtran · 411 firmwareMar 31, 2025

  • CVE-2025-22937
    39Monitor

    An issue in Adtran 411 ONT vL80.00.0011.M2 allows attackers to escalate privileges via unspecified vectors.

    CriticalCVSS 9.8No exploitEPSS 0%

    adtran · 411 firmwareMar 31, 2025

  • CVE-2023-38120
    36Monitor

    Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability

    HighCVSS 8.8Proof of conceptEPSS 3%

    adtran · sr400ac firmwareMay 2, 2024

  • CVE-2024-31977
    36Monitor

    Adtran 834-5 11.1.0.101-202106231430, and fixed as of SmartOS Version 12.6.3.1, devices allow OS Command Injection via shell metacharacters

    HighCVSS 8.8No exploitEPSS 1%

    adtran · sdg smartosJul 24, 2024

  • CVE-2025-22940
    36Monitor

    Incorrect access control in Adtran 411 ONT L80.00.0011.M2 allows unauthorized attackers to arbitrarily set the admin password.

    CriticalCVSS 9.1No exploitEPSS 0%

    adtran · 411 firmwareMar 31, 2025

  • CVE-2018-19648
    35Monitor

    An issue was discovered in ADTRAN PMAA 1.6.2-1, 1.6.3, and 1.6.4.

    HighCVSS 8.8No exploitEPSS 1%

    adtran · pmaaMar 27, 2019

  • CVE-2024-31970
    35Monitor

    AdTran SRG 834-5 HDC17600021F1 devices (with SmartOS 11.1.1.1 and fixed in Version 12.1.3.1) have SSH enabled by default, accessible both ov

    HighCVSS 8.8No exploitEPSS 0%

    adtran · sdg smartosJul 24, 2024

  • CVE-2024-28093
    35Monitor

    The TELNET service of AdTran NetVanta 3120 18.01.01.00.E devices is enabled by default, and has default credentials for a root-level account

    HighCVSS 8.8No exploitEPSS 0%

    Mar 26, 2024

  • CVE-2021-25681
    33Monitor

    AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration of data over DNS.

    HighCVSS 7.5Proof of conceptEPSS 10%

    adtran · personal phone managerApr 20, 2021

  • CVE-2024-39345
    28Monitor

    AdTran 834-5 HDC17600021F1 (SmartOS 11.1.1.1) devices enable the SSH service by default and have a hidden, undocumented, hard-coded support

    HighCVSS 7.2No exploitEPSS 0%

    adtran · sdg smartosJul 24, 2024

  • CVE-2021-25680
    25Monitor

    The AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting (XSS) issues.

    MediumCVSS 6.1Proof of conceptEPSS 2%

    adtran · personal phone managerApr 20, 2021

  • CVE-2021-25679
    22Monitor

    The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting (XSS) issues.

    MediumCVSS 5.4Proof of conceptEPSS 2%

    adtran · personal phone managerApr 20, 2021

  • CVE-2005-4564
    20Monitor

    The Internet Key Exchange version 1 (IKEv1) implementation in ADTRAN NetVanta before 10.03.03.E might allow remote attackers to cause a deni

    MediumCVSS 5.0No exploitEPSS 1%

    adtran · netvantaDec 29, 2005

  • CVE-2000-0292
    20Monitor

    The Adtran MX2800 M13 Multiplexer allows remote attackers to cause a denial of service via a ping flood to the Ethernet interface, which cau

    MediumCVSS 5.0No exploitEPSS 1%

    adtran · mx2800Apr 19, 2000

  • CVE-2024-31971
    19Monitor

    Multiple stored cross-site scripting (XSS) vulnerabilities on AdTran NetVanta 3120 18.01.01.00.E devices allow remote attackers to inject ar

    MediumCVSS 4.8No exploitEPSS 0%

    adtran · netvanta 3120 firmwareJul 24, 2024

  • CVE-2013-5210
    17Monitor

    Cross-site scripting (XSS) vulnerability in the GUI login page in ADTRAN AOS before R10.8.1 on the NetVanta 7100 allows remote attackers to

    MediumCVSS 4.3No exploitEPSS 1%

    adtran · aosDec 30, 2013