by Kastro
Paper/Archive/CVE-2025-6559

CVE-2025-6559

Sapido BR071n — Sapido Wireless Router - OS Command Injection

EPSS 2%CVSS 9.8
critical.is priorityof 100
45
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 77.4.774 × 2015.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Multiple wireless router models from Sapido have an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server. The affected models are out of support; replacing the device is recommended.

Affected

ProductAffectedFixed inSource
BR071nall versions–CNA
BR261call versions–CNA
BR270nall versions–CNA
BR476nall versions–CNA
BRC70nall versions–CNA
BRC70xall versions–CNA
BRC76nall versions–CNA
BRD70nall versions–CNA
BRE70nall versions–CNA
BRE71nall versions–CNA
BRF61call versions–CNA
BRF71nall versions–CNA

Scores by source

twcert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
twcert (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

writeuptwcert.org.tw/tw/cp-132-10196-898d3-1.htmlwriteuptwcert.org.tw/en/cp-139-10195-69da1-2.html