Adtran Personal Phone Manager vulnerabilities
3 known vulnerabilities affecting adtran/personal_phone_manager.
Total CVEs
3
CISA KEV
0
Public exploits
3
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2021-25681P2HIGHCVSS 7.5PoCv10.8.12021-04-20
CVE-2021-25681 [HIGH] CVE-2021-25681: AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration
AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration of data over DNS. This could allow for exposed AdTran Personal Phone Manager web servers to be used as DNS redirectors to tunnel arbitrary data over DNS. NOTE: The affected appliances NetVanta 7060 and NetVanta 7100 are considered End of Life and as such this
nvd
CVE-2021-25680P3MEDIUMCVSS 6.1PoC≤ 10.8.12021-04-20
CVE-2021-25680 [MEDIUM] CWE-79 CVE-2021-25680: The AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting
The AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting (XSS) issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only version 10.8.1 was able to be confirmed during primary research. NOTE: The affected
nvd
CVE-2021-25679P4MEDIUMCVSS 5.4PoC≤ 10.8.12021-04-20
CVE-2021-25679 [MEDIUM] CWE-79 CVE-2021-25679: The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scrip
The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting (XSS) issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only version 10.8.1 was able to be confirmed during primary research. NOTE: The aff
nvd