CVE-2021-25680: XSS
UNSUPPORTED WHEN ASSIGNED The AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting (XSS) issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only version 10.8.1 was able to be confirmed during primary research. NOTE: The affected appliances NetVanta 7060 and NetVanta 7100 are considered End of Life and as such this issue will not be patched.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-25680?
CVE-2021-25680 is classified as a moderate severity vulnerability due to its reflected cross-site scripting (XSS) issues.
How do I fix CVE-2021-25680?
To mitigate CVE-2021-25680, it is recommended to upgrade the AdTran Personal Phone Manager software to a version later than 10.8.1.
What vulnerabilities are associated with CVE-2021-25680?
CVE-2021-25680 is associated with multiple reflected cross-site scripting (XSS) vulnerabilities in the AdTran Personal Phone Manager.
Which versions of AdTran software are affected by CVE-2021-25680?
CVE-2021-25680 affects AdTran Personal Phone Manager versions 10.8.1 and below.
Can later versions of AdTran Personal Phone Manager be affected by CVE-2021-25680?
Later versions of AdTran Personal Phone Manager have not been disclosed as being affected, but vulnerabilities may still exist.