What is the severity of CVE-2021-25681?

CVE-2021-25681 is classified as a medium severity vulnerability due to its potential for data exfiltration over DNS.

How do I fix CVE-2021-25681?

To fix CVE-2021-25681, users should upgrade to a patched version of AdTran Personal Phone Manager, if available.

What type of vulnerability is CVE-2021-25681?

CVE-2021-25681 is a vulnerability that allows for the exfiltration of data over DNS.

What are the potential impacts of CVE-2021-25681?

The potential impacts of CVE-2021-25681 include unauthorized data access and the possibility of using affected systems as DNS redirectors.

Which software versions are affected by CVE-2021-25681?

CVE-2021-25681 specifically affects AdTran Personal Phone Manager version 10.8.1.

Vulnerability/
CVE-2021-25681

high

7.5

20/4/2021

3/8/2024

CVE-2021-25681

First published: Tue Apr 20 2021(Updated: 8 months ago)

** UNSUPPORTED WHEN ASSIGNED ** AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration of data over DNS. This could allow for exposed AdTran Personal Phone Manager web servers to be used as DNS redirectors to tunnel arbitrary data over DNS. NOTE: The affected appliances NetVanta 7060 and NetVanta 7100 are considered End of Life and as such this issue will not be patched.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
AdTran Personal Phone Manager	=10.8.1
Adtran Netvanta 7060
Adtran NetVanta 7100
All of
AdTran Personal Phone Manager	=10.8.1
Any of
Adtran Netvanta 7060
Adtran NetVanta 7100

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2021-25681?
CVE-2021-25681 is classified as a medium severity vulnerability due to its potential for data exfiltration over DNS.
How do I fix CVE-2021-25681?
To fix CVE-2021-25681, users should upgrade to a patched version of AdTran Personal Phone Manager, if available.
What type of vulnerability is CVE-2021-25681?
CVE-2021-25681 is a vulnerability that allows for the exfiltration of data over DNS.
What are the potential impacts of CVE-2021-25681?
The potential impacts of CVE-2021-25681 include unauthorized data access and the possibility of using affected systems as DNS redirectors.
Which software versions are affected by CVE-2021-25681?
CVE-2021-25681 specifically affects AdTran Personal Phone Manager version 10.8.1.

agent/type
agent/severity
agent/references
agent/description
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/first-publish-date
agent/event
agent/last-modified-date
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/author
vendor/adtran
canonical/adtran personal phone manager
version/adtran personal phone manager/10.8.1
canonical/adtran netvanta 7060
canonical/adtran netvanta 7100

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.