CVE-2021-25679: The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting (X...

Security readout for executives and security teams

CVE-2021-25679 is a stored cross-site scripting issue in AdTran Personal Phone Manager. An authenticated user could store script content that later runs in another user’s browser. The named appliances, NetVanta 7060 and 7100, are end-of-life, and the CVE notes this issue will not be patched. Organizations still operating AdTran NetVanta 7060 or 7100 with Personal Phone Manager are the primary concern. Exposure is higher if the management interface is reachable by many internal users or any untrusted network. Public internet exposure should be treated as urgent to review. Treat this as a lifecycle and access-control risk. It is not documented as actively exploited, but affected systems are end-of-life and unpatched. Prioritize isolation and replacement if the product remains in use, especially where management access is broad or internet-reachable. Mitigation focus: Inventory AdTran NetVanta 7060 and 7100 systems using Personal Phone Manager.; Replace or retire end-of-life appliances where feasible.; Restrict Personal Phone Manager access to trusted administrative networks only..

Prepared

Jul 11, 2026, 12:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.