PT-2025-48998 · Fanvil · Fanvil X210 V2

Published 2025-12-03 · Updated 2025-12-04 · CVE-2025-64055

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Fanvil x210 V2 version 2.12.20

Description An issue exists in Fanvil x210 V2 version 2.12.20 that allows unauthenticated attackers on the local network to access administrative functions of the device. These functions include file upload, firmware update, and reboot. The issue is due to a crafted authentication bypass.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2025-64055

Affected Products

Fanvil X210 V2

References · 7

• 🔥 https://github.com/SpikeReply/advisories/blob/main/cve/fanvil/cve-2025-64055.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-64055 · Security Note
• https://osv.dev/vulnerability/CVE-2025-64055 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1996426254879269011 · Twitter Post
• http://fanvil.com · Note
• https://t.me/CVEtracker/38798 · Telegram Post
• https://twitter.com/CVEnew/status/1996327641499009269 · Twitter Post