CVEvulnerability
CVE-2025-64055
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2025-12-03
- Last modified
- 2026-09-25
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-287
Description
An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on the local network to access administrative functions of the device (e.g. file upload, firmware update, reboot...) via a crafted authentication bypass.
Affected configurations
• fanvil x210 firmware 2.12.20
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- https://github.com/SpikeReply/advisories/blob/main/cve/fanvil/cve-2025-64055.md Exploit, Third Party Advisory
- https://github.com/SpikeReply/advisories/blob/main/cve/fanvil/cve-2025-64055.md Exploit, Third Party Advisory