An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on the local network to access administrative functions of the device (e.g. file upload, firmware update, reboot...) via a crafted authentication bypass.
https://github.com/SpikeReply/advisories/blob/main/cve/fanvil/cve-2025-64055.md