---
id: CVE-2021-25681
title: >-
  AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that
  allows for exfiltration of data over DNS
summary: >-
  AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that
  allows for exfiltration of data over DNS. This could allow for exposed AdTran
  Personal Phone Manager web servers to be used as DNS redirectors to tunnel
  arbitra…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
vendor: adtran
product: personal_phone_manager
affected:
  - personal_phone_manager = 10.8.1
published: '2021-04-20'
updated: '2026-07-05'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2021-25681'
references:
  - url: >-
      http://packetstormsecurity.com/files/162280/Adtran-Personal-Phone-Manager-10.8.1-DNS-Exfiltration.html
    label: cve@mitre.org
  - url: >-
      https://github.com/3ndG4me/AdTran-Personal-Phone-Manager-Vulns/blob/main/CVE-2021-25681.md
    label: cve@mitre.org
  - url: 'http://adtran.com'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      http://packetstormsecurity.com/files/162280/Adtran-Personal-Phone-Manager-10.8.1-DNS-Exfiltration.html
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://github.com/3ndG4me/AdTran-Personal-Phone-Manager-Vulns/blob/main/CVE-2021-25681.md
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
  - exploit-available
epss: 0.10879
epssPercentile: 0.95711
exploitAvailable: true
ingestedAt: '2026-07-05T00:59:25.850Z'
exploits:
  exploitdb: true
  checkedAt: '2026-09-26T09:05:26.380Z'
---

## Overview

AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration of data over DNS. This could allow for exposed AdTran Personal Phone Manager web servers to be used as DNS redirectors to tunnel arbitrary data over DNS. NOTE: The affected appliances NetVanta 7060 and NetVanta 7100 are considered End of Life and as such this issue will not be patched.

## Affected

- `personal_phone_manager = 10.8.1`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.