Vulnerabilidades de Fanvil
CVEs publicadas que afetam produtos de Fanvil: 6 registro(s), com severidade, exploração e correções.
CVE-2025-64056
Média · 4.3
CWE-306 05/12/2025
Missing Authentication for Critical Function em Fanvil X210 Firmware
File upload vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on the local network to store arbitrary files on the filesystem.
CVE-2025-64054
Crítica · 9.6
CWE-79 05/12/2025
Cross-site Scripting (XSS) em Fanvil X210 Firmware
A reflected Cross Site Scripting (XSS) vulnerability on Fanvil x210 2.12.20 devices allows attackers to cause a denial of service or potentially execute arbitrary commands via crafted POST request to the /cgi-bin/webconfig?page=upload&action=submit endpoint.
CVE-2025-64053
Alta · 7.5
CWE-120 05/12/2025
Classic Buffer Overflow em Fanvil X210 Firmware
A Buffer overflow vulnerability on Fanvil x210 2.12.20 devices allows attackers to cause a denial of service or potentially execute arbitrary commands via crafted POST request to the /cgi-bin/webconfig?page=upload&action=submit endpoint.
CVE-2025-64052
Média · 5.1
CWE-77 05/12/2025
Command Injection em Fanvil X210 Firmware
An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on the local network to execute arbitrary system commands.
CVE-2025-64057
Alta · 8.3
CWE-22 05/12/2025
Path Traversal em Fanvil X210 Firmware
Directory traversal vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on the local network to store files in arbitrary locations and potentially modify the system configuration or other unspecified impacts.
CVE-2025-64055
Crítica · 9.8
CWE-287 03/12/2025
Improper Authentication em Fanvil X210 Firmware
An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on the local network to access administrative functions of the device (e.g. file upload, firmware update, reboot...) via a crafted authentication bypass.