{"id":56073,"date":"2025-06-30T07:38:17","date_gmt":"2025-06-30T07:38:17","guid":{"rendered":""},"modified":"2025-10-24T08:38:50","modified_gmt":"2025-10-24T14:38:50","slug":"cve-2025-6559-command-injection-vulnerability-in-multiple-sapido-wireless-router-models","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-6559-command-injection-vulnerability-in-multiple-sapido-wireless-router-models\/","title":{"rendered":"CVE-2025-6559: Command Injection Vulnerability in Multiple Sapido Wireless Router Models<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

This blog post provides an in-depth analysis of the recently discovered vulnerability identified as CVE-2025-6559, affecting multiple models of wireless routers from Sapido. This vulnerability, classified as an OS Command Injection vulnerability, has a serious potential impact on the cybersecurity landscape due to its high severity score and broad reach. It allows unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server, leading to potential system<\/a> compromise and data leakage. Given that the affected models are no longer supported by the manufacturer, the risk is compounded due to the lack<\/a> of immediate patches or updates.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-6559
\nSeverity: Critical (CVSS Score: 9.8)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: System Compromise<\/a>, Potential Data Leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n