Critical severity · published Jun 24, 2025
CVE-2025-6560
Sapido Wireless Router - Exposure of Sensitive Information
9.8
CVSS
0.6%
EPSS
No
On KEV
Description
Multiple wireless router models from Sapido have an Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to directly access a system configuration file and obtain plaintext administrator credentials.  The affected models are out of support; replacing the device is recommended.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 50% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BR
BR071n · Sapido
0 · source: vendor
BR
BR261c · Sapido
0 · source: vendor
BR
BR270n · Sapido
0 · source: vendor
BR
BR476n · Sapido
0 · source: vendor
BR
BRC70n · Sapido
0 · source: vendor
BR
BRC70x · Sapido
0 · source: vendor
BR
BRC76n · Sapido
0 · source: vendor
BR
BRD70n · Sapido
0 · source: vendor
BR
BRE70n · Sapido
0 · source: vendor
BR
BRE71n · Sapido
0 · source: vendor
BR
BRF61c · Sapido
0 · source: vendor
BR
BRF71n · Sapido
0 · source: vendor