CVE-2025-64057

8.3 highEPSS 0.8%

High (8.3) in fanvil x210 firmware. EPSS 0.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on the local network to store files in arbitrary locations and potentially modify the system configuration or other unspecified impacts.

Severity

CVSS 3.1

8.3 high

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2025-12-05
Modified: 2026-09-25
Record from: the NVD, synced 2026-10-19

Affected

fanvil:x210_firmware

References

https://github.com/SpikeReply/advisories/blob/main/cve/fanvil/cve-2025-64057.md

Check your stack JSON