CVE-2025-64056
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
A file upload vulnerability in Fanvil x210 V2 version 2.12.20 allows unauthenticated attackers on the local network to store arbitrary files on the filesystem.
Risk Assessment
An attacker can upload malicious files such as backdoors or scripts, potentially leading to device compromise and further attacks on the internal network.
Recommendation
Immediately update the Fanvil x210 V2 firmware to the latest version and restrict device access to trusted networks only.
Other vulnerabilities in Fanvil x210 V2
See all- CVE-2025-64055Critical
An issue was discovered in Fanvil x210 V2 version 2.12.20 allowing unauthenticated attackers on the local network to bypass authentication and access administrative functions such as file upload, firmware update, and device reboot.
- CVE-2025-64052Medium
An issue was discovered in Fanvil x210 V2 version 2.12.20 that allows unauthenticated attackers on the local network to execute arbitrary system commands.
- CVE-2025-64057High
A directory traversal vulnerability in Fanvil x210 V2 version 2.12.20 allows unauthenticated attackers on the local network to store files in arbitrary locations, potentially modifying system configuration or causing other unspecified impacts.
Original NVD description (English source)
File upload vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on the local network to store arbitrary files on the filesystem.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS