CVE-2021-25680: XSS
First published: Tue Apr 20 2021(Updated: )
** UNSUPPORTED WHEN ASSIGNED ** The AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting (XSS) issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only version 10.8.1 was able to be confirmed during primary research. NOTE: The affected appliances NetVanta 7060 and NetVanta 7100 are considered End of Life and as such this issue will not be patched.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| AdTran Personal Phone Manager | <=10.8.1 | |
| Any of | ||
| Adtran Netvanta 7060 | ||
| Adtran NetVanta 7100 | ||
| AdTran Personal Phone Manager | <=10.8.1 | |
| Adtran Netvanta 7060 | ||
| Adtran NetVanta 7100 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2021-25680?
CVE-2021-25680 is classified as a moderate severity vulnerability due to its reflected cross-site scripting (XSS) issues.
How do I fix CVE-2021-25680?
To mitigate CVE-2021-25680, it is recommended to upgrade the AdTran Personal Phone Manager software to a version later than 10.8.1.
What vulnerabilities are associated with CVE-2021-25680?
CVE-2021-25680 is associated with multiple reflected cross-site scripting (XSS) vulnerabilities in the AdTran Personal Phone Manager.
Which versions of AdTran software are affected by CVE-2021-25680?
CVE-2021-25680 affects AdTran Personal Phone Manager versions 10.8.1 and below.
Can later versions of AdTran Personal Phone Manager be affected by CVE-2021-25680?
Later versions of AdTran Personal Phone Manager have not been disclosed as being affected, but vulnerabilities may still exist.
- agent/type
- agent/severity
- agent/weakness
- agent/references
- agent/description
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/first-publish-date
- agent/event
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/author
- vendor/adtran
- canonical/adtran personal phone manager
- version/adtran personal phone manager/10.8.1
- canonical/adtran netvanta 7060
- canonical/adtran netvanta 7100