Description
Directory traversal vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on the local network to store files in arbitrary locations and potentially modify the system configuration or other unspecified impacts.
Affected products
fanvil: x210 firmware; fanvil: x210
References1
- github.com/SpikeReply/advisories/blob/main/cve/fanvil/cve-2025-… ExploitThird Party Advisory
Metrics
- CVSS 3.1
-
8.3
HIGH
Score source: CNA
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H - EPSS — exploit probability
- 1% percentile: 59 · as of 11 November 2026
- CWE
- CWE-22
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.