CVE-2025-64056

File upload vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on the local network to store arbitrary files on the filesystem.

Score

CVSS 3.1 4.3 Medium

Status

Modified - cve@mitre.org

Published

2025-12-05

Last modified

2026-07-05

Weaknesses

CWE-306

Affected products

• X210 Firmware (Fanvil)

References

• https://github.com/SpikeReply/advisories/blob/main/cve/fanvil/cve-2025-64056.md