CVE-2025-64055

PoC —

CVSS 3.1

9.8 critical

EPSS

<1%p42

Published

Dec 3, 2025 (Dec 3, 2025)

Modified

Jul 5, 2026

Description

An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on the local network to access administrative functions of the device (e.g. file upload, firmware update, reboot...) via a crafted authentication bypass.

Vendors: fanvil
Products: x210 firmware
Weakness: CWE-287
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.