CVE-2019-25487 affects SAPIDO RB-1732 router version 2.0.43, containing a critical remote command execution vulnerability. The flaw allows unauthenticated attackers to execute arbitrary system commands through the formSysCmd endpoint. Attackers can exploit this by sending POST requests with malicious shell commands in the sysCmd parameter. The vulnerability grants router-level privileges to successful attackers. This represents a significant security risk for affected network infrastructure devices.