CVE-2025-64057

CVSS 8.3 HIGHEPSS 0.8%CWE-22

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 8.3EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

05 Dec 2025Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Directory traversal vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on the local network to store files in arbitrary locations and potentially modify the system configuration or other unspecified impacts.

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

Affected products

n/a · n/a

References

https://github.com/SpikeReply/advisories/blob/main/cve/fanvil/cve-2025-64057.md