CVE-2025-70516

The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authentication restrictions against sessionless users. The lack of restrictions grants anyone the ability to view any device resources such as operational logs or perform diagnostic requests.

CVSS v3 9.1 CRITICAL

9.1^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
http://download.fanvil.com/Firmware/Release/X7A/
https://www.darkpoint.ca/blog/2026/02/27/Fanvil-x7a-PA2S-Vulnerability-Disclosure
https://www.fanvil.com/products/p1/x/20210921/5043.html

Configurations

No configuration.

History

26 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) El controlador de websocket del firmware de Fanvil x7a versión 2.6.0.1182 no aplica restricciones de autenticación adecuadas contra usuarios sin sesión. La falta de restricciones otorga a cualquiera la capacidad de ver cualquier recurso del dispositivo, como registros operativos, o de realizar solicitudes de diagnóstico.

07 Oct 2026, 21:17

Type	Values Removed	Values Added
CWE		CWE-306
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 9.1

07 Oct 2026, 15:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-10-07 15:16

Updated : 2026-10-26 21:10

NVD link : CVE-2025-70516

Mitre link : CVE-2025-70516

CVE.ORG link : CVE-2025-70516

JSON object : View

Products Affected

No product.

CWE

CWE-306

Missing Authentication for Critical Function

{"id": "CVE-2025-70516", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-70516", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-10-07T20:25:16.865702Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 3.9}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2026-10-07T15:16:52.310", "references": [{"url": "http://download.fanvil.com/Firmware/Release/X7A/", "source": "cve@mitre.org"}, {"url": "https://www.darkpoint.ca/blog/2026/02/27/Fanvil-x7a-PA2S-Vulnerability-Disclosure", "source": "cve@mitre.org"}, {"url": "https://www.fanvil.com/products/p1/x/20210921/5043.html", "source": "cve@mitre.org"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-306"}]}], "descriptions": [{"lang": "en", "value": "The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authentication restrictions against sessionless users. The lack of restrictions grants anyone the ability to view any device resources such as operational logs or perform diagnostic requests."}, {"lang": "es", "value": "El controlador de websocket del firmware de Fanvil x7a versi\u00f3n 2.6.0.1182 no aplica restricciones de autenticaci\u00f3n adecuadas contra usuarios sin sesi\u00f3n. La falta de restricciones otorga a cualquiera la capacidad de ver cualquier recurso del dispositivo, como registros operativos, o de realizar solicitudes de diagn\u00f3stico."}], "lastModified": "2026-10-26T21:10:00.170", "sourceIdentifier": "cve@mitre.org"}