CVE-2021-25679

Опубликовано: 20 апр. 2021

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting (XSS) issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only version 10.8.1 was able to be confirmed during primary research. NOTE: The affected appliances NetVanta 7060 and NetVanta 7100 are considered End of Life and as such this issue will not be patched

Ссылки

http://adtran.com
Vendor Advisory
http://packetstormsecurity.com/files/162268/Adtran-Personal-Phone-Manager-10.8.1-Persistent-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
https://depthsecurity.com/blog/vulnerability-disclosure
Third Party Advisory
https://github.com/3ndG4me/AdTran-Personal-Phone-Manager-Vulns/blob/main/CVE-2021-25679.md
Exploit
Third Party Advisory
http://adtran.com
Vendor Advisory
http://packetstormsecurity.com/files/162268/Adtran-Personal-Phone-Manager-10.8.1-Persistent-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
https://depthsecurity.com/blog/vulnerability-disclosure
Third Party Advisory
https://github.com/3ndG4me/AdTran-Personal-Phone-Manager-Vulns/blob/main/CVE-2021-25679.md
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:adtran:personal_phone_manager:*:*:*:*:*:*:*:*

Версия до 10.8.1 (включая)

Одно из

cpe:2.3:h:adtran:netvanta_7060:-:*:*:*:*:*:*:*

cpe:2.3:h:adtran:netvanta_7100:-:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.00832

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-2rgj-37q4-7q75

CVSS3: 5.4

github

больше 3 лет назад

** UNSUPPORTED WHEN ASSIGNED ** The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting (XSS) issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only version 10.8.1 was able to be confirmed during primary research. NOTE: The affected appliances NetVanta 7060 and NetVanta 7100 are considered End of Life and as such this issue will not be patched.

EPSS

Процентиль: 74%

0.00832

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79