CVE-2025-70518

{
  "etk_id": "ETK-2026-1332",
  "cve_id": "CVE-2025-70518",
  "display_id": "CVE-2025-70518",
  "ghsa_id": "GHSA-24vj-wxqq-2fxq",
  "euvd_id": "EUVD-2025-211049",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Command injection in Fanvil x7a diagnostic ping tool",
  "summary": "Fanvil x7a devices running firmware 2.6.0.1182 are affected by command injection in the management portal's diagnostic ping tool. An unauthenticated attacker who can access the management portal may execute commands on the underlying Android operating system.",
  "mitigation": "Restrict management portal access to trusted administrative networks and prevent untrusted users from reaching the diagnostic tool. Obtain and apply vendor-provided updated firmware when available.",
  "vendor": "Fanvil",
  "product": "Fanvil x7a",
  "affected": [
    {
      "affected_notes": [
        "n/a"
      ],
      "affected_ranges": [],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "n/a",
      "purl": null
    }
  ],
  "cwes": [
    77
  ],
  "cvss_score": 10,
  "cvss_src": "nvd",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
  "epss_score": 0.0056,
  "epss_percentile": 0.4546,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 39.304668916666664,
  "t0_at": "2026-10-07T00:00:00+00:00",
  "signals": {
    "public_poc": {
      "at": "2026-10-07T16:05:07.444000+00:00",
      "days": 0.6702250462962963,
      "is_lower_bound": false,
      "measured_at": "2026-10-07T00:00:00+00:00",
      "url": "https://www.darkpoint.ca/blog/2026/02/27/Fanvil-x7a-PA2S-Vulnerability-Disclosure"
    },
    "trigger_signal": {
      "at": "2026-10-07T00:00:00+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-07T00:00:00+00:00",
      "url": "https://github.com/advisories/GHSA-24vj-wxqq-2fxq"
    }
  }
}