CVE-2025-64053

A Buffer overflow vulnerability on Fanvil x210 2.12.20 devices allows attackers to cause a denial of service or potentially execute arbitrary commands via crafted POST request to the /cgi-bin/webconfig?page=upload&action=submit endpoint...

CVE-2025-64054

The Fanvil x210 IP telephony device, specifically version 2.12.20 , is susceptible to a reflected Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this by sending a crafted POST request to the /cgi-bin/webconfig?page=upload&action=submit endpoint. Successful exploitation could le...

CVE-2025-64054

A reflected Cross Site Scripting XSS vulnerability on Fanvil x210 2.12.20 devices allows attackers to cause a denial of service or potentially execute arbitrary commands via crafted POST request to the /cgi-bin/webconfig?page=upload&action=submit endpoint...