// For flags

CVE-2021-25681

Adtran Personal Phone Manager 10.8.1 - DNS Exfiltration

Severity Score

7.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

4
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration of data over DNS. This could allow for exposed AdTran Personal Phone Manager web servers to be used as DNS redirectors to tunnel arbitrary data over DNS. NOTE: The affected appliances NetVanta 7060 and NetVanta 7100 are considered End of Life and as such this issue will not be patched

El software AdTran Personal Phone Manager versión 10.8.1, es vulnerable a un problema que permite la exfiltración de datos por medio de DNS. Esto podría permitir a servidores web expuestos de AdTran Personal Phone Manager ser usados como redirectores de DNS para canalizar datos arbitrarios por medio de DNS. NOTA: Los dispositivos NetVanta 7060 y NetVanta 7100 afectados son considerados en Fin de Vida y, como tal, este problema no será parcheado

Adtran Personal Phone Manager version 10.8.1 suffers from a DNS exfiltration vulnerability.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
None
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2021-01-21 CVE Reserved
  • 2021-04-20 CVE Published
  • 2021-04-21 First Exploit
  • 2024-08-03 CVE Updated
  • 2025-02-07 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Adtran
Search vendor "Adtran"
 Personal Phone Manager
Search vendor "Adtran" for product "Personal Phone Manager"
 10.8.1
Search vendor "Adtran" for product "Personal Phone Manager" and version "10.8.1"
-
Affected
in Adtran
Search vendor "Adtran"
 Netvanta 7060
Search vendor "Adtran" for product "Netvanta 7060"
--
Safe
Adtran
Search vendor "Adtran"
 Personal Phone Manager
Search vendor "Adtran" for product "Personal Phone Manager"
 10.8.1
Search vendor "Adtran" for product "Personal Phone Manager" and version "10.8.1"
-
Affected
in Adtran
Search vendor "Adtran"
 Netvanta 7100
Search vendor "Adtran" for product "Netvanta 7100"
--
Safe
* End Of Life in some or all products. Do not expect updates.