CVE-2025-6559CWE-78

Sapido Wireless Router - OS Command Injection

Critical · published June 24, 2025

CVSS v4.0
9.3
EPSS
2%
Percentile
77.2
In the wild
Unconfirmed
What it is

🚨 An OS Command Injection vulnerability in multiple Sapido wireless routers could let attackers execute arbitrary commands on your network — no authentication required! 🔥 Think of it like a sneaky delivery person who has the key to your garage and can drop off anything they want without your knowledge — completely unauthorized! This could lead to an attacker taking full control of your router, allowing them to intercept your data, manipulate traffic, or even launch attacks on devices connected to your network. It's a security nightmare that could compromise your entire home or office environment!

Put simply

Think of it like a sneaky delivery person who has the key to your garage and can drop off anything they want without your knowledge — completely unauthorized! This vulnerability allows unauthenticated attackers to inject OS commands into the affected routers, leading to remote execution of these commands. Since the devices are out of support, no patches will be provided, increasing the urgency to disable or replace them.

What to do

This could lead to an attacker taking full control of your router, allowing them to intercept your data, manipulate traffic, or even launch attacks on devices connected to your network. It's a security nightmare that could compromise your entire home or office environment! It's critical to replace any affected Sapido router models immediately. As a temporary measure, ensure they're disconnected from your network to prevent any unauthorized access. Stay proactive with your hardware and keep an eye on the market for secure options! You've got this! Act now and protect your network like the hero you are! 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.01712 · 77.2th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2025-06-24T01:47Z
EPSS history
Timeline
  • 24 JUN 01:47Z
    Sapido Wireless Router - OS Command Injection
    cvelistv5