AdTran Personal Phone Manager vulnerabilities
3 known CVE vulnerabilities in AdTran Personal Phone Manager, translated and rated.
- CVE-2021-25681High
AdTran Personal Phone Manager 10.8.1 software is vulnerable to data exfiltration over DNS. Exposed web servers can be used as DNS redirectors to tunnel arbitrary data.
- CVE-2021-25680Medium
AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting (XSS) issues. This affects at least version 10.8.1 and below, but potentially later versions as well. The affected NetVanta 7060 and NetVanta 7100 appliances are End of Life and will not receive a patch.
- CVE-2021-25679Medium
AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting (XSS) issue. This affects at least version 10.8.1 and earlier, but potentially later versions as well. The affected NetVanta 7060 and NetVanta 7100 appliances are End of Life and will not receive a patch.