İçeriğe atla
Noroxi

Adtran kayıtları

adtran üreticisine ait 21 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%4,8
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 21
  3. 22
  4. 24
  5. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

21 kayıt
  • CVE-2022-37661
    49Planlayın

    SmartRG SR506n 2.5.15 and SR510n 2.6.13 routers are vulnerable to Remote Code Execution (RCE) via the ping host feature.

    KritikCVSS 9,8Kavram kanıtıEPSS %34

    adtran · sr510n firmware14 Eyl 2022

  • CVE-2005-4566
    41Planlayın

    Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in ADTRAN NetVanta before 10.03.03.E might allow remote attack

    KritikCVSS 10,0İstismar yokEPSS %3

    adtran · netvanta29 Ara 2005

  • CVE-2005-4565
    41Planlayın

    Format string vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation in ADTRAN NetVanta before 10.03.03.E might allow r

    KritikCVSS 10,0İstismar yokEPSS %2

    adtran · netvanta29 Ara 2005

  • CVE-2025-22939
    40Planlayın

    A command injection vulnerability in the telnet service of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate privileges to root and

    KritikCVSS 9,8İstismar yokEPSS %3

    adtran · 411 firmware31 Mar 2025

  • CVE-2025-22941
    40Planlayın

    A command injection vulnerability in the web interface of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate privileges to root and

    KritikCVSS 9,8İstismar yokEPSS %2

    adtran · 411 firmware31 Mar 2025

  • CVE-2025-22938
    39İzleyin

    Adtran 411 ONT L80.00.0011.M2 was discovered to contain weak default passwords.

    KritikCVSS 9,8İstismar yokEPSS %1

    adtran · 411 firmware31 Mar 2025

  • CVE-2025-22937
    39İzleyin

    An issue in Adtran 411 ONT vL80.00.0011.M2 allows attackers to escalate privileges via unspecified vectors.

    KritikCVSS 9,8İstismar yokEPSS %1

    adtran · 411 firmware31 Mar 2025

  • CVE-2023-38120
    36İzleyin

    Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %4

    adtran · sr400ac firmware2 May 2024

  • CVE-2024-31977
    36İzleyin

    Adtran 834-5 11.1.0.101-202106231430, and fixed as of SmartOS Version 12.6.3.1, devices allow OS Command Injection via shell metacharacters

    YüksekCVSS 8,8İstismar yokEPSS %2

    adtran · sdg smartos24 Tem 2024

  • CVE-2025-22940
    36İzleyin

    Incorrect access control in Adtran 411 ONT L80.00.0011.M2 allows unauthorized attackers to arbitrarily set the admin password.

    KritikCVSS 9,1İstismar yokEPSS %0

    adtran · 411 firmware31 Mar 2025

  • CVE-2018-19648
    35İzleyin

    An issue was discovered in ADTRAN PMAA 1.6.2-1, 1.6.3, and 1.6.4.

    YüksekCVSS 8,8İstismar yokEPSS %1

    adtran · pmaa27 Mar 2019

  • CVE-2024-31970
    35İzleyin

    AdTran SRG 834-5 HDC17600021F1 devices (with SmartOS 11.1.1.1 and fixed in Version 12.1.3.1) have SSH enabled by default, accessible both ov

    YüksekCVSS 8,8İstismar yokEPSS %1

    adtran · sdg smartos24 Tem 2024

  • CVE-2024-28093
    35İzleyin

    The TELNET service of AdTran NetVanta 3120 18.01.01.00.E devices is enabled by default, and has default credentials for a root-level account

    YüksekCVSS 8,8İstismar yokEPSS %0

    26 Mar 2024

  • CVE-2021-25681
    33İzleyin

    AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration of data over DNS.

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    adtran · personal phone manager20 Nis 2021

  • CVE-2024-39345
    28İzleyin

    AdTran 834-5 HDC17600021F1 (SmartOS 11.1.1.1) devices enable the SSH service by default and have a hidden, undocumented, hard-coded support

    YüksekCVSS 7,2İstismar yokEPSS %1

    adtran · sdg smartos24 Tem 2024

  • CVE-2021-25680
    25İzleyin

    The AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting (XSS) issues.

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    adtran · personal phone manager20 Nis 2021

  • CVE-2021-25679
    22İzleyin

    The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting (XSS) issues.

    OrtaCVSS 5,4Kavram kanıtıEPSS %3

    adtran · personal phone manager20 Nis 2021

  • CVE-2005-4564
    20İzleyin

    The Internet Key Exchange version 1 (IKEv1) implementation in ADTRAN NetVanta before 10.03.03.E might allow remote attackers to cause a deni

    OrtaCVSS 5,0İstismar yokEPSS %2

    adtran · netvanta29 Ara 2005

  • CVE-2000-0292
    20İzleyin

    The Adtran MX2800 M13 Multiplexer allows remote attackers to cause a denial of service via a ping flood to the Ethernet interface, which cau

    OrtaCVSS 5,0İstismar yokEPSS %1

    adtran · mx280019 Nis 2000

  • CVE-2024-31971
    19İzleyin

    Multiple stored cross-site scripting (XSS) vulnerabilities on AdTran NetVanta 3120 18.01.01.00.E devices allow remote attackers to inject ar

    OrtaCVSS 4,8İstismar yokEPSS %0

    adtran · netvanta 3120 firmware24 Tem 2024

  • CVE-2013-5210
    17İzleyin

    Cross-site scripting (XSS) vulnerability in the GUI login page in ADTRAN AOS before R10.8.1 on the NetVanta 7100 allows remote attackers to

    OrtaCVSS 4,3İstismar yokEPSS %1

    adtran · aos30 Ara 2013