CVE-2025-64055
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
An issue was discovered in Fanvil x210 V2 version 2.12.20 allowing unauthenticated attackers on the local network to bypass authentication and access administrative functions such as file upload, firmware update, and device reboot.
Risk Assessment
An attacker on the local network can gain full control over the device, potentially compromising system integrity and availability, and using the device as an entry point for further network attacks.
Recommendation
Immediately update the Fanvil x210 V2 firmware to the latest available version and restrict administrative interface access to trusted networks only using firewall rules.
Other vulnerabilities in Fanvil x210 V2
See all- CVE-2025-64056Medium
A file upload vulnerability in Fanvil x210 V2 version 2.12.20 allows unauthenticated attackers on the local network to store arbitrary files on the filesystem.
- CVE-2025-64052Medium
An issue was discovered in Fanvil x210 V2 version 2.12.20 that allows unauthenticated attackers on the local network to execute arbitrary system commands.
- CVE-2025-64057High
A directory traversal vulnerability in Fanvil x210 V2 version 2.12.20 allows unauthenticated attackers on the local network to store files in arbitrary locations, potentially modifying system configuration or causing other unspecified impacts.
Original NVD description (English source)
An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on the local network to access administrative functions of the device (e.g. file upload, firmware update, reboot...) via a crafted authentication bypass.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS