CVE-2021-25680

The AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting (XSS) issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only version 10.8.1 was able to be confirmed during primary research. NOTE: The affected appliances NetVanta 7060 and NetVanta 7100 are considered End of Life and as such this issue will not be patched.

• CWE-79

• http://packetstormsecurity.com/files/162269/Adtran-Personal-Phone-Manager-10.8.1-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/3ndG4me/AdTran-Personal-Phone-Manager-Vulns/blob/main/CVE-2021-25680.mdExploit, Third Party Advisory
• http://packetstormsecurity.com/files/162269/Adtran-Personal-Phone-Manager-10.8.1-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/3ndG4me/AdTran-Personal-Phone-Manager-Vulns/blob/main/CVE-2021-25680.mdExploit, Third Party Advisory

Published

Apr 20, 2021

Last Modified

Jul 9, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-25674A vulnerability has been identified in SIMATIC S7-PLCSIM V5.…5.5
• CVE-2021-25675A vulnerability has been identified in SIMATIC S7-PLCSIM V5.…5.5
• CVE-2021-25676A vulnerability has been identified in RUGGEDCOM RM1224 (V6.…7.5
• CVE-2021-25677A vulnerability has been identified in APOGEE PXC Compact (B…5.3
• CVE-2021-25678A vulnerability has been identified in Solid Edge SE2020 (Al…7.8
• CVE-2021-25679The AdTran Personal Phone Manager software is vulnerable to …5.4
• CVE-2021-25681AdTran Personal Phone Manager 10.8.1 software is vulnerable …7.5
• CVE-2021-25682It was discovered that the get_pid_info() function in data/a…7.8
• CVE-2021-25683It was discovered that the get_starttime() function in data/…7.8
• CVE-2021-25684It was discovered that apport in data/apport did not properl…7.8
• CVE-2021-25688Under certain conditions, Teradici PCoIP Agents for Windows …5.5
• CVE-2021-25689An out of bounds write in Teradici PCoIP soft client version…9.8