CVE-2025-64057
HighCVSS 8.3Exploitation Probability (EPSS)
Elevated risk50th percentile - higher than 50% of all known CVEs
Summary
A directory traversal vulnerability in Fanvil x210 V2 version 2.12.20 allows unauthenticated attackers on the local network to store files in arbitrary locations, potentially modifying system configuration or causing other unspecified impacts.
Risk Assessment
The risk for the organization includes unauthorized modification of device configuration, which could disrupt VoIP telephony services or enable further attacks on the internal network.
Recommendation
It is recommended to immediately update the firmware of the Fanvil x210 V2 device to the latest version and restrict device access to trusted networks only.
Other vulnerabilities in Fanvil x210 V2
See all- CVE-2025-64055Critical
An issue was discovered in Fanvil x210 V2 version 2.12.20 allowing unauthenticated attackers on the local network to bypass authentication and access administrative functions such as file upload, firmware update, and device reboot.
- CVE-2025-64056Medium
A file upload vulnerability in Fanvil x210 V2 version 2.12.20 allows unauthenticated attackers on the local network to store arbitrary files on the filesystem.
- CVE-2025-64052Medium
An issue was discovered in Fanvil x210 V2 version 2.12.20 that allows unauthenticated attackers on the local network to execute arbitrary system commands.
Original NVD description (English source)
Directory traversal vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on the local network to store files in arbitrary locations and potentially modify the system configuration or other unspecified impacts.