CVE-2025-64053 is a buffer overflow vulnerability affecting Fanvil x210 devices specifically version 2.12.20. The vulnerability is exploitable via a crafted POST request to the /cgi-bin/webconfig?page=upload&action=submit endpoint, which may lead to denial of service or arbitrary command execution. The CVSS 3.1 base score is 7.5, indicating high severity, with network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to availability. No known exploits in the wild or vendor patches are currently documented.

Successful exploitation can cause denial of service, disrupting device availability, or potentially allow attackers to execute arbitrary commands on the affected device. This could compromise device integrity and availability but does not directly impact confidentiality or integrity according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected endpoint and monitor for unusual POST requests targeting /cgi-bin/webconfig?page=upload&action=submit. Avoid exposing the device to untrusted networks.