CVE-2025-6560 — AI Deep Analysis Summary

Q: What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: Critical info leak in Sapido routers. 📉 **Consequences**: Admin credentials exposed in plaintext. 💥 **Impact**: Full device compromise, network takeover.

Q: Root Cause? (CWE/Flaw)

🛡️ **CWE**: CWE-256 (Unprotected Storage of Credentials). 🔍 **Flaw**: Sensitive data stored/transmitted without encryption. 📝 **Result**: Plaintext admin passwords visible to attackers.

Q: Who is affected? (Versions/Components)

🏢 **Vendor**: Sapido. 📦 **Affected Models**: BR071n, BR261c, BR270n, BR476n, BRC70n, BRC70x, BRC76n, BRD70n, BRE70n, BRE71n, BRF61c, BRF71n. ⚠️ **Scope**: Multiple consumer router lines.

Q: What can hackers do? (Privileges/Data)

🕵️ **Action**: Remote unauthenticated access. 🔑 **Privilege**: Gains Admin access. 📂 **Data**: Steals plaintext admin passwords. 🌐 **Risk**: Lateral movement into internal networks.

Q: Is exploitation threshold high? (Auth/Config)

📉 **Threshold**: LOW. 🚫 **Auth**: None required (Remote). ⚙️ **Config**: No user interaction needed. 🎯 **Vector**: Network-based attack surface.

Q: Is there a public Exp? (PoC/Wild Exploitation)

🚫 **Public Exp**: No PoC provided in data. 📰 **Refs**: Third-party advisories only (TW-CERT). 🕰️ **Status**: Theoretical but high-risk due to CVSS score.

Q: How to self-check? (Features/Scanning)

🔍 **Check**: Scan for Sapido devices. 📡 **Feature**: Look for unencrypted admin interfaces. 🛠️ **Tool**: Use CVSS vector analysis. 📋 **Verify**: Check model list against inventory.

Q: Is it fixed officially? (Patch/Mitigation)

🔄 **Patch**: Data shows no official fix link. 📅 **Date**: Published 2025-06-24. 📞 **Action**: Contact vendor directly. 📉 **Mitigation**: Network isolation recommended.

Q: What if no patch? (Workaround)

🚧 **Workaround**: Disable remote management. 🔒 **Network**: Block external access to router ports. 🔄 **Update**: Monitor vendor for patch. 📉 **Segregation**: Isolate IoT devices.

Q: Is it urgent? (Priority Suggestion)

🔥 **Priority**: CRITICAL. 📊 **CVSS**: 9.8 (High). ⏳ **Urgency**: Immediate action needed. 🛡️ **Risk**: High impact, low effort for attackers.

Updated May 06, 2026 CVSS 9.8 · Critical

This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login. Read the full analysis →

Q1What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: Critical info leak in Sapido routers. 📉 **Consequences**: Admin credentials exposed in plaintext. 💥 **Impact**: Full device compromise, network takeover.

Q2Root Cause? (CWE/Flaw)

🛡️ **CWE**: CWE-256 (Unprotected Storage of Credentials). 🔍 **Flaw**: Sensitive data stored/transmitted without encryption. 📝 **Result**: Plaintext admin passwords visible to attackers.

Q3Who is affected? (Versions/Components)

🏢 **Vendor**: Sapido. 📦 **Affected Models**: BR071n, BR261c, BR270n, BR476n, BRC70n, BRC70x, BRC76n, BRD70n, BRE70n, BRE71n, BRF61c, BRF71n. ⚠️ **Scope**: Multiple consumer router lines.

Q4What can hackers do? (Privileges/Data)

🕵️ **Action**: Remote unauthenticated access. 🔑 **Privilege**: Gains Admin access. 📂 **Data**: Steals plaintext admin passwords. 🌐 **Risk**: Lateral movement into internal networks.

Q5Is exploitation threshold high? (Auth/Config)

📉 **Threshold**: LOW. 🚫 **Auth**: None required (Remote). ⚙️ **Config**: No user interaction needed. 🎯 **Vector**: Network-based attack surface.

Q6Is there a public Exp? (PoC/Wild Exploitation)

🚫 **Public Exp**: No PoC provided in data. 📰 **Refs**: Third-party advisories only (TW-CERT). 🕰️ **Status**: Theoretical but high-risk due to CVSS score.

Q7How to self-check? (Features/Scanning)

🔍 **Check**: Scan for Sapido devices. 📡 **Feature**: Look for unencrypted admin interfaces. 🛠️ **Tool**: Use CVSS vector analysis. 📋 **Verify**: Check model list against inventory.

Q8Is it fixed officially? (Patch/Mitigation)

🔄 **Patch**: Data shows no official fix link. 📅 **Date**: Published 2025-06-24. 📞 **Action**: Contact vendor directly. 📉 **Mitigation**: Network isolation recommended.

Q9What if no patch? (Workaround)

🚧 **Workaround**: Disable remote management. 🔒 **Network**: Block external access to router ports. 🔄 **Update**: Monitor vendor for patch. 📉 **Segregation**: Isolate IoT devices.

Q10Is it urgent? (Priority Suggestion)

🔥 **Priority**: CRITICAL. 📊 **CVSS**: 9.8 (High). ⏳ **Urgency**: Immediate action needed. 🛡️ **Risk**: High impact, low effort for attackers.

Continue exploring

Vulnerability detail Full AI analysis (login) Sapido CWE-256