Sapido Wireless Routers OS Command Injection Vulnerability

Vulnerability

A command injection vulnerability has been identified in multiple wireless router models from Sapido, including the BR071n, BR261c, BR270n, BR476n, BRC70n, BRC70x, BRC76n, BRD70n, BRE70n, BRE71n, BRF61c, and BRF71n. This vulnerability allows unauthenticated remote attackers to inject and execute arbitrary operating system commands on the affected devices. The models are no longer supported, and users are advised to replace them.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected device's operating system.

Remediation

The affected models are out of support; replacing the device is recommended.

Added: Jun 24, 2025, 3:49 AM
Updated: Jun 24, 2025, 3:49 AM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
7.5
exploitability
7.4
remediation
4.7
relevance
0.2
threat
0.0
urgency
2.9
incentive
5.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.