X210 Firmware

6 CVEs product

Monthly

CVE-2025-64056 MEDIUM POC This Month

File upload vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on the local network to store arbitrary files on the filesystem.

File Upload Authentication Bypass X210 Firmware
NVD GitHub
CVSS 3.1
4.3
EPSS
0.1%
CVE-2025-64054 CRITICAL POC Act Now

A reflected Cross Site Scripting (XSS) vulnerability on Fanvil x210 2.12.20 devices allows attackers to cause a denial of service or potentially execute arbitrary commands via crafted POST request to the /cgi-bin/webconfig?page=upload&action=submit endpoint.

XSS Denial Of Service X210 Firmware
NVD GitHub
CVSS 3.1
9.6
EPSS
0.1%
CVE-2025-64053 HIGH POC This Week

A Buffer overflow vulnerability on Fanvil x210 2.12.20 devices allows attackers to cause a denial of service or potentially execute arbitrary commands via crafted POST request to the /cgi-bin/webconfig?page=upload&action=submit endpoint.

Buffer Overflow Denial Of Service X210 Firmware
NVD GitHub
CVSS 3.1
7.5
EPSS
0.2%
CVE-2025-64052 MEDIUM POC This Month

An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on the local network to execute arbitrary system commands.

Command Injection X210 Firmware
NVD GitHub
CVSS 3.1
5.1
EPSS
0.1%
CVE-2025-64057 HIGH POC This Week

Directory traversal vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on the local network to store files in arbitrary locations and potentially modify the system configuration or other unspecified impacts.

Path Traversal X210 Firmware
NVD GitHub
CVSS 3.1
8.3
EPSS
0.1%
CVE-2025-64055 CRITICAL POC Act Now

An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on the local network to access administrative functions of the device (e.g. file upload, firmware update, reboot...) via a crafted authentication bypass.

File Upload Authentication Bypass X210 Firmware
NVD GitHub
CVSS 3.1
9.8
EPSS
0.6%
CVE-2025-64056
EPSS 0% CVSS 4.3
MEDIUM POC This Month

File upload vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on the local network to store arbitrary files on the filesystem.

File Upload Authentication Bypass X210 Firmware
NVD GitHub
CVE-2025-64054
EPSS 0% CVSS 9.6
CRITICAL POC Act Now

A reflected Cross Site Scripting (XSS) vulnerability on Fanvil x210 2.12.20 devices allows attackers to cause a denial of service or potentially execute arbitrary commands via crafted POST request to the /cgi-bin/webconfig?page=upload&action=submit endpoint.

XSS Denial Of Service X210 Firmware
NVD GitHub
CVE-2025-64053
EPSS 0% CVSS 7.5
HIGH POC This Week

A Buffer overflow vulnerability on Fanvil x210 2.12.20 devices allows attackers to cause a denial of service or potentially execute arbitrary commands via crafted POST request to the /cgi-bin/webconfig?page=upload&action=submit endpoint.

Buffer Overflow Denial Of Service X210 Firmware
NVD GitHub
CVE-2025-64052
EPSS 0% CVSS 5.1
MEDIUM POC This Month

An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on the local network to execute arbitrary system commands.

Command Injection X210 Firmware
NVD GitHub
CVE-2025-64057
EPSS 0% CVSS 8.3
HIGH POC This Week

Directory traversal vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on the local network to store files in arbitrary locations and potentially modify the system configuration or other unspecified impacts.

Path Traversal X210 Firmware
NVD GitHub
CVE-2025-64055
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on the local network to access administrative functions of the device (e.g. file upload, firmware update, reboot...) via a crafted authentication bypass.

File Upload Authentication Bypass X210 Firmware
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy