CVE-2025-6560 — AI Deep Analysis Summary

🚨 **Essence**: Critical info leak in Sapido routers. 📉 **Consequences**: Admin credentials exposed in plaintext. 💥 **Impact**: Full device compromise, network takeover.

🛡️ **CWE**: CWE-256 (Unprotected Storage of Credentials). 🔍 **Flaw**: Sensitive data stored/transmitted without encryption. 📝 **Result**: Plaintext admin passwords visible to attackers.

🏢 **Vendor**: Sapido. 📦 **Affected Models**: BR071n, BR261c, BR270n, BR476n, BRC70n, BRC70x, BRC76n, BRD70n, BRE70n, BRE71n, BRF61c, BRF71n. ⚠️ **Scope**: Multiple consumer router lines.

🕵️ **Action**: Remote unauthenticated access. 🔑 **Privilege**: Gains Admin access. 📂 **Data**: Steals plaintext admin passwords. 🌐 **Risk**: Lateral movement into internal networks.

📉 **Threshold**: LOW. 🚫 **Auth**: None required (Remote). ⚙️ **Config**: No user interaction needed. 🎯 **Vector**: Network-based attack surface.

🚫 **Public Exp**: No PoC provided in data. 📰 **Refs**: Third-party advisories only (TW-CERT). 🕰️ **Status**: Theoretical but high-risk due to CVSS score.

🔍 **Check**: Scan for Sapido devices. 📡 **Feature**: Look for unencrypted admin interfaces. 🛠️ **Tool**: Use CVSS vector analysis. 📋 **Verify**: Check model list against inventory.

🔄 **Patch**: Data shows no official fix link. 📅 **Date**: Published 2025-06-24. 📞 **Action**: Contact vendor directly. 📉 **Mitigation**: Network isolation recommended.

🚧 **Workaround**: Disable remote management. 🔒 **Network**: Block external access to router ports. 🔄 **Update**: Monitor vendor for patch. 📉 **Segregation**: Isolate IoT devices.

🔥 **Priority**: CRITICAL. 📊 **CVSS**: 9.8 (High). ⏳ **Urgency**: Immediate action needed. 🛡️ **Risk**: High impact, low effort for attackers.