CVE-2025-64053: Buffer Overflow

Published Dec 5, 2025

Updated

A Buffer overflow vulnerability on Fanvil x210 2.12.20 devices allows attackers to cause a denial of service or potentially execute arbitrary commands via crafted POST request to the /cgi-bin/webconfig?page=upload&action=submit endpoint.

Affected Software

3 affected components

Fanvil x210

All of the following

Fanvil X210 Firmware=2.12.20

Fanvil x210=2.0

Event History

Dec 5, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-64053?

CVE-2025-64053 has a high severity rating due to its potential to cause denial of service or execute arbitrary commands.

How do I fix CVE-2025-64053?

To mitigate CVE-2025-64053, update the Fanvil x210 devices to the latest firmware version provided by the manufacturer.

What devices are affected by CVE-2025-64053?

CVE-2025-64053 affects Fanvil x210 devices running firmware version 2.12.20.

What type of attack is possible with the CVE-2025-64053 vulnerability?

CVE-2025-64053 allows attackers to perform denial of service and potentially execute arbitrary commands via crafted POST requests.

Is there a workaround for CVE-2025-64053 if I cannot update the firmware?

There are no documented workarounds for CVE-2025-64053 other than updating the firmware to address the vulnerability.