by Kastro
Paper/Archive/CVE-2025-6560

CVE-2025-6560

Sapido BR071n — Sapido Wireless Router - Exposure of Sensitive Information

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 50.4.504 × 2010.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Multiple wireless router models from Sapido have an Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to directly access a system configuration file and obtain plaintext administrator credentials.  The affected models are out of support; replacing the device is recommended.

Affected

ProductAffectedFixed inSource
BR071nall versions–CNA
BR261call versions–CNA
BR270nall versions–CNA
BR476nall versions–CNA
BRC70nall versions–CNA
BRC70xall versions–CNA
BRC76nall versions–CNA
BRD70nall versions–CNA
BRE70nall versions–CNA
BRE71nall versions–CNA
BRF61call versions–CNA
BRF71nall versions–CNA

Scores by source

twcert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
twcert (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

writeuptwcert.org.tw/tw/cp-132-10197-524ea-1.htmlwriteuptwcert.org.tw/en/cp-139-10198-55217-2.html