This vulnerability affects Fanvil x210 V2 firmware version 2.12.20. It enables unauthenticated local network attackers to bypass authentication controls, granting them access to sensitive administrative functions including file uploads, firmware updates, and device reboots. The issue is categorized under CWE-287 (Improper Authentication) and has a CVSS v3.1 base score of 9.8, indicating critical severity with network attack vector, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation allows an attacker on the local network to fully control the affected device's administrative functions. This includes uploading arbitrary files, updating firmware potentially with malicious code, and rebooting the device, leading to complete compromise of the device's confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local network access to trusted users only and monitor for suspicious activity related to administrative functions on the device.