SAPIDO RB-1732 V2.0.43 contains a remote command execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submittin…

Published:

10 maart 2026 om 23:00:00

Alert date:

11 maart 2026 om 20:06:05

Source:

nvd.nist.gov

Network Infrastructure, Mobile & IoT

CVE-2019-25487 affects SAPIDO RB-1732 router version 2.0.43, containing a critical remote command execution vulnerability. The flaw allows unauthenticated attackers to execute arbitrary system commands through the formSysCmd endpoint. Attackers can exploit this by sending POST requests with malicious shell commands in the sysCmd parameter. The vulnerability grants router-level privileges to successful attackers. This represents a significant security risk for affected network infrastructure devices.

Technical details

Mitigation steps:

Affected products:

SAPIDO RB-1732