Unrated severityNVD Advisory· Published Apr 20, 2021· Updated Aug 3, 2024

CVE-2021-25681

Description

AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration of data over DNS. This could allow for exposed AdTran Personal Phone Manager web servers to be used as DNS redirectors to tunnel arbitrary data over DNS. NOTE: The affected appliances NetVanta 7060 and NetVanta 7100 are considered End of Life and as such this issue will not be patched

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

AdTran/Personal Phone Managerdescription
Adtran/Personal Phone Managerllm-fuzzy
Range: =10.8.1
Adtran/Netvanta 7060llm-fuzzy
Adtran/Netvanta 7100llm-fuzzy

Patches

Vulnerability mechanics

References

adtran.commitrex_refsource_MISC
packetstormsecurity.com/files/162280/Adtran-Personal-Phone-Manager-10.8.1-DNS-Exfiltration.htmlmitrex_refsource_MISC
github.com/3ndG4me/AdTran-Personal-Phone-Manager-Vulns/blob/main/CVE-2021-25681.mdmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.011
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000