{"id":"CVE-2025-70518","published":"2026-10-07T15:16:53.183","lastModified":"2026-10-07T17:16:44.960","description":"The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system.","cvssScore":10,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-77"],"vendors":[],"products":[],"references":[{"url":"http://download.fanvil.com/Firmware/Release/X7A/","tags":[]},{"url":"https://www.darkpoint.ca/blog/2026/02/27/Fanvil-x7a-PA2S-Vulnerability-Disclosure","tags":[]},{"url":"https://www.fanvil.com/products/p1/x/20210921/5043.html","tags":[]},{"url":"https://www.darkpoint.ca/blog/2026/02/27/Fanvil-x7a-PA2S-Vulnerability-Disclosure","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw allows unauthenticated attackers to inject commands and execute code on the underlying Android operating system, leading to remote code execution.","exploitability":"Exploitation is relatively easy as it requires no authentication and can be done via the diagnostic ping tool.","blast_radius":"If exploited, the impact could be severe, allowing full control over the device and potentially the network it is connected to.","remediation":"Upgrade to firmware version 2.6.0.1183 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","unauth","web","firmware"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-08T08:40:34.443Z"}}