Read the docs
TI-2019-15540 Aliases CVE-2019-25487GHSA-c925-88rr-2hq4

SAPIDO RB-1732 V2.0.43 Remote Command Execution via formSysCmd

Priority HIGH 81CWE-639Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-639.

Summary

SAPIDO RB-1732 V2.0.43 contains a remote command execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious input to the formSysCmd endpoint. Attackers can send POST requests with the sysCmd parameter containing shell commands to execute code on the device with router privileges.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.08956 95th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SapidoRB-17322.0.43—No fix listedCNA
  • RB-1732 VendorSapido Affected 2.0.43 Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-25487
  2. 2026-10-03 Alias added: GHSA-c925-88rr-2hq4
  3. 2026-11-06 EPSS moved to the 95th–99th percentile

References

Exploit 1

  • TI-2021-03101 Sapido BR270n/BRC76n/GR297/RB1732 syscmd.htm os command injection CVSS 3.1HIGH 8.8
  • TI-2025-05958 Sapido Wireless Router - OS Command Injection CVSS 4.0CRITICAL 9.3
  • TI-2025-05959 Sapido Wireless Router - Exposure of Sensitive Information CVSS 4.0CRITICAL 9.3
  • TI-2019-14287 A certain router administration interface (that includes Realtek APMIB 0.11f for Boa… CVSS 3.1HIGH 7.5
  • TI-2019-14288 A certain router administration interface (that includes Realtek APMIB 0.11f for Boa… CVSS 3.1HIGH 7.5
  • TI-2025-06891 Sapido RB-1802 URL Filtering Page urlfilter.asp cross site scripting CVSS 4.0MEDIUM 4.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences