GCVE - cpe:2.3:h:fanvil:x210:2.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:fanvil:x210:2.0:*:*:*:*:*:*:*

part: h version: 2.0 update: *

Vendor	Fanvil (`a4e98bdc-0094-51d1-8688-484d44d0d649`)
Product	X210 (`19ab8e45-1123-5f7d-a68b-7a8c4f734919`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-64057`	not_vulnerable	2026-06-08 07:39:17.948793	Details available Directory traversal vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on the local network to store files in arbitrary locations and potentially modify the system configuration or other unspecified impacts. Published: 2025-12-05T00:00:00.000Z Updated: 2026-07-05T01:22:55.765Z Open on db.gcve.eu Reference links https://github.com/SpikeReply/advisories/blob/main/cve/fanvil/cve-2025-64057.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-64056`	not_vulnerable	2026-06-08 07:39:17.948371	Details available File upload vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on the local network to store arbitrary files on the filesystem. Published: 2025-12-05T00:00:00.000Z Updated: 2026-07-05T01:22:51.598Z Open on db.gcve.eu Reference links https://github.com/SpikeReply/advisories/blob/main/cve/fanvil/cve-2025-64056.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-64055`	not_vulnerable	2026-06-08 07:39:17.947994	Details available An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on the local network to access administrative functions of the device (e.g. file upload, firmware update, reboot...) via a crafted authentication bypass. Published: 2025-12-03T00:00:00.000Z Updated: 2026-07-05T01:22:47.664Z Open on db.gcve.eu Reference links https://github.com/SpikeReply/advisories/blob/main/cve/fanvil/cve-2025-64055.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-64054`	not_vulnerable	2026-06-08 07:39:17.947336	Details available A reflected Cross Site Scripting (XSS) vulnerability on Fanvil x210 2.12.20 devices allows attackers to cause a denial of service or potentially execute arbitrary commands via crafted POST request to the /cgi-bin/webconfig?page=upload&action=submit endpoint. Published: 2025-12-05T00:00:00.000Z Updated: 2026-07-05T01:22:43.186Z Open on db.gcve.eu Reference links https://github.com/SpikeReply/advisories/blob/main/cve/fanvil/cve-2025-64054.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-64053`	not_vulnerable	2026-06-08 07:39:17.946693	Details available A Buffer overflow vulnerability on Fanvil x210 2.12.20 devices allows attackers to cause a denial of service or potentially execute arbitrary commands via crafted POST request to the /cgi-bin/webconfig?page=upload&action=submit endpoint. Published: 2025-12-05T00:00:00.000Z Updated: 2026-07-05T01:22:38.794Z Open on db.gcve.eu Reference links https://github.com/SpikeReply/advisories/blob/main/cve/fanvil/cve-2025-64053.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-64052`	not_vulnerable	2026-06-08 07:39:17.946118	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.