CVE-2025-64054

A reflected Cross Site Scripting XSS vulnerability on Fanvil x210 2.12.20 devices allows attackers to cause a denial of service or potentially execute arbitrary commands via crafted POST request to the /cgi-bin/webconfig?page=upload&action=submit endpoint...

CVE-2025-64054

Fanvil x210 devices running version 2.12.20 are affected by CVE-2025-64054, a reflected XSS vulnerability that can be triggered by a crafted POST to /cgi-bin/webconfig?page=upload&action=submit. The issue can lead to denial of service and potentially arbitrary command execution. Public or vendor-...

CVE-2025-64053

A Buffer overflow vulnerability on Fanvil x210 2.12.20 devices allows attackers to cause a denial of service or potentially execute arbitrary commands via crafted POST request to the /cgi-bin/webconfig?page=upload&action=submit endpoint...