CVE-2019-25487 — SAPIDO RB-1732 V2.0.43 Remote Command Execution via formSysCmd
SAPIDO RB-1732 V2.0.43 contains a remote command execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious input…
Published: 2026-03-11 · CVSS: 9.3 · CVSS 4.0
SAPIDO RB-1732 V2.0.43 contains a remote command execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious input to the formSysCmd endpoint. Attackers can send POST requests with the sysCmd parameter containing shell commands to execute code on the device with router privileges.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7