CVE-2025-64055

Summary

An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on the local network to access administrative functions of the device (e.g. file upload, firmware update, reboot…) via a crafted authentication bypass.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: total

Additional References

• https://github.com/SpikeReply/advisories/blob/main/cve/fanvil/cve-2025-64055.md

References

• https://github.com/SpikeReply/advisories/blob/main/cve/fanvil/cve-2025-64055.md

• ←Previous
• Next→