VULNERABILITY INTELLIGENCE

CVE-2025-64055

CVSS score9.8 CRITICAL
EPSS probability0.52%
CISA KEVNot currently listed
Published2025-12-03
Last modified2026-09-25
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on the local network to access administrative functions of the device (e.g. file upload, firmware update, reboot...) via a crafted authentication bypass.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-287

Primary references