{"id":"CVE-2025-70521","published":"2026-10-07T15:16:55.003","lastModified":"2026-10-07T21:17:06.540","description":"The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-77"],"vendors":[],"products":[],"references":[{"url":"http://download.fanvil.com/Firmware/Release/PA2S/","tags":[]},{"url":"https://www.darkpoint.ca/blog/2026/02/27/Fanvil-x7a-PA2S-Vulnerability-Disclosure","tags":[]},{"url":"https://www.fanvil.com/products/p5/wulianwangwangguan_1/20210921/5035.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw allows unauthenticated attackers to inject commands and execute code on the underlying Android operating system, due to insecure user input handling in the diagnostic ping tool.","exploitability":"Exploitation is relatively straightforward as no authentication is required, and the tool is accessible via the management portal.","blast_radius":"If exploited, the attacker could gain full control over the device and potentially the entire network it is connected to.","remediation":"Upgrade to firmware version 2.6.0.1183 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","unauth","web","firmware"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-08T08:40:41.700Z"}}