CVE-2025-64052
MediumCVSS 5.1Exploitation Probability (EPSS)
High risk83th percentile - higher than 83% of all known CVEs
Summary
An issue was discovered in Fanvil x210 V2 version 2.12.20 that allows unauthenticated attackers on the local network to execute arbitrary system commands.
Risk Assessment
An attacker with local network access can take full control of the device, potentially compromising data confidentiality, integrity, and network availability.
Recommendation
Immediately update the device firmware to the latest available version and restrict local network access to authorized devices only.
Other vulnerabilities in Fanvil x210 V2
See all- CVE-2025-64055Critical
An issue was discovered in Fanvil x210 V2 version 2.12.20 allowing unauthenticated attackers on the local network to bypass authentication and access administrative functions such as file upload, firmware update, and device reboot.
- CVE-2025-64056Medium
A file upload vulnerability in Fanvil x210 V2 version 2.12.20 allows unauthenticated attackers on the local network to store arbitrary files on the filesystem.
- CVE-2025-64057High
A directory traversal vulnerability in Fanvil x210 V2 version 2.12.20 allows unauthenticated attackers on the local network to store files in arbitrary locations, potentially modifying system configuration or causing other unspecified impacts.
Original NVD description (English source)
An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on the local network to execute arbitrary system commands.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS