CVE-2025-64053

HighCVSS 7.5

Published: 05/12/2025(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

2.53%

83th percentile - higher than 83% of all known CVEs

Summary

A buffer overflow vulnerability in Fanvil x210 devices version 2.12.20 allows an attacker to cause a denial of service or potentially execute arbitrary commands via a crafted POST request to the /cgi-bin/webconfig?page=upload&action=submit endpoint.

Risk Assessment

The risk includes device disruption (DoS) and potential remote code execution, which could lead to device compromise and network security breach.

Recommendation

It is recommended to immediately update the firmware of Fanvil x210 devices to the latest version and restrict access to the management interface to trusted networks only.

Other vulnerabilities in Fanvil x210

CVE-2025-64054Critical
A reflected Cross Site Scripting (XSS) vulnerability in Fanvil x210 devices version 2.12.20 allows attackers to cause denial of service or potentially execute arbitrary commands via a crafted POST request to the /cgi-bin/webconfig?page=upload&action=submit endpoint.

Original NVD description (English source)

A Buffer overflow vulnerability on Fanvil x210 2.12.20 devices allows attackers to cause a denial of service or potentially execute arbitrary commands via crafted POST request to the /cgi-bin/webconfig?page=upload&action=submit endpoint.