CVE-2025-6559: Sapido Wireless Router - OS Command Injection
Multiple wireless router models from Sapido have an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server. The affected models are out of support; replacing the device is recommended.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6559?
CVE-2025-6559 is considered a critical vulnerability as it allows unauthenticated remote code execution on affected devices.
How do I fix CVE-2025-6559?
The recommended fix for CVE-2025-6559 is to replace the affected Sapido wireless routers, as they are no longer supported.
What devices are affected by CVE-2025-6559?
CVE-2025-6559 affects multiple models of Sapido wireless routers that are out of support.
Can CVE-2025-6559 be exploited remotely?
Yes, CVE-2025-6559 can be exploited remotely by unauthenticated attackers to execute arbitrary OS commands.
Is there a patch available for CVE-2025-6559?
There is no patch for CVE-2025-6559 since the affected devices are no longer supported by the vendor.