Read the docs

Fanvil

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Fanvil records in CISA KEV

No Fanvil vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

6 records

Priority HIGH 76

A reflected Cross Site Scripting (XSS) vulnerability on Fanvil x210 2.12.20 devices allows attackers to cause a denial of service or potentially execute arbitrary commands via crafted POST request to the /cgi-bin/webconf…

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.0047 Published 2025-12-05 No fix listed CWE-79
Priority HIGH 69

Directory traversal vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on the local network to store files in arbitrary locations and potentially modify the system configuration or other unspecified…

CVSS 3.1HIGH 8.3 Adjacent network No auth No interaction EPSS 0.00869 Published 2025-12-05 No fix listed CWE-22
Priority HIGH 66

A Buffer overflow vulnerability on Fanvil x210 2.12.20 devices allows attackers to cause a denial of service or potentially execute arbitrary commands via crafted POST request to the /cgi-bin/webconfig?page=upload&action…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03099 Published 2025-12-05 No fix listed CWE-120
Open these records in search →