CVE-2025-6560

An attacker can directly access the device configuration file without authentication via the network. This file contains administrator authentication credentials stored in plaintext, which violates secure password storage principles (CWE-256 — Plaintext Storage of a Password). Once this data is obtained, the attacker can take full control of the device.

An attacker gains access to router administrator credentials in plaintext, enabling complete device takeover, network configuration modification, network traffic interception, or use of the router as an entry point for further attacks on the internal network.

The manufacturer does not plan to release a patch — the indicated models are end-of-life and out of support cycle. The manufacturer recommends replacing devices with new, actively supported models. Until replacement, access to the device management interface should be restricted to trusted hosts only, and the device should be isolated from unauthenticated external access.

Multiple models of Sapido wireless routers — specific models indicated in the manufacturer's references (TWCERT). All listed models are no longer supported by the manufacturer.