CVE-2025-6560CWE-256

Sapido Wireless Router - Exposure of Sensitive Information

Critical · published June 24, 2025

CVSS v4.0
9.3
EPSS
1%
Percentile
49.8
In the wild
Unconfirmed
What it is

🚨 A shocking vulnerability lets attackers waltz into your router's configuration without breaking a sweat! 🔥 Think of this like a post office that leaves sensitive customer letters unsealed and visible to anyone passing by — an open invitation for identity thieves. 😱 An attacker could easily snatch plaintext administrator credentials directly from the router's configuration file, allowing them unrestricted access to your network. This could lead to intrusions that jeopardize every device connected to your Wi-Fi, putting personal data and privacy at serious risk. The consequences could be absolutely devastating!

Put simply

Think of this like a post office that leaves sensitive customer letters unsealed and visible to anyone passing by — an open invitation for identity thieves. 😱 The vulnerability in multiple Sapido wireless router models allows unauthenticated remote access to system configuration files, revealing sensitive information like admin credentials without any authentication barriers in place.

What to do

An attacker could easily snatch plaintext administrator credentials directly from the router's configuration file, allowing them unrestricted access to your network. This could lead to intrusions that jeopardize every device connected to your Wi-Fi, putting personal data and privacy at serious risk. The consequences could be absolutely devastating! Since these models are out of support, the best course of action is to replace the device as soon as possible. If immediate replacement isn't feasible, secure your network by limiting router access, changing default credentials, and monitoring for unusual activity. 📦 You've got this! By taking these steps, you can secure your network and regain peace of mind. 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00635 · 49.8th percentile
Weakness
CWE-256 · Plaintext Storage of a Password
Published
2025-06-24T02:01Z
EPSS history
Timeline
  • 24 JUN 02:01Z
    Sapido Wireless Router - Exposure of Sensitive Information
    cvelistv5