CVE-2021-25681

AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration of data over DNS. This could allow for exposed AdTran Personal Phone Manager web servers to be used as DNS redirectors to tunnel arbitrary data over DNS. NOTE: The affected appliances NetVanta 7060 and NetVanta 7100 are considered End of Life and as such this issue will not be patched.

• http://packetstormsecurity.com/files/162280/Adtran-Personal-Phone-Manager-10.8.1-DNS-Exfiltration.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/3ndG4me/AdTran-Personal-Phone-Manager-Vulns/blob/main/CVE-2021-25681.mdExploit, Third Party Advisory
• http://packetstormsecurity.com/files/162280/Adtran-Personal-Phone-Manager-10.8.1-DNS-Exfiltration.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/3ndG4me/AdTran-Personal-Phone-Manager-Vulns/blob/main/CVE-2021-25681.mdExploit, Third Party Advisory

Published

Apr 20, 2021

Last Modified

Jul 9, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-25675A vulnerability has been identified in SIMATIC S7-PLCSIM V5.…5.5
• CVE-2021-25676A vulnerability has been identified in RUGGEDCOM RM1224 (V6.…7.5
• CVE-2021-25677A vulnerability has been identified in APOGEE PXC Compact (B…5.3
• CVE-2021-25678A vulnerability has been identified in Solid Edge SE2020 (Al…7.8
• CVE-2021-25679The AdTran Personal Phone Manager software is vulnerable to …5.4
• CVE-2021-25680The AdTran Personal Phone Manager software is vulnerable to …6.1
• CVE-2021-25682It was discovered that the get_pid_info() function in data/a…7.8
• CVE-2021-25683It was discovered that the get_starttime() function in data/…7.8
• CVE-2021-25684It was discovered that apport in data/apport did not properl…7.8
• CVE-2021-25688Under certain conditions, Teradici PCoIP Agents for Windows …5.5
• CVE-2021-25689An out of bounds write in Teradici PCoIP soft client version…9.8
• CVE-2021-25690A null pointer dereference in Teradici PCoIP Soft Client ver…7.5