Description
Multiple wireless router models from Sapido have an Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to directly access a system configuration file and obtain plaintext administrator credentials.
The affected models are out of support; replacing the device is recommended.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Sapido | BR071n | — | — |
| Sapido | BR261c | — | — |
| Sapido | BR270n | — | — |
| Sapido | BR476n | — | — |
| Sapido | BRC70n | — | — |
| Sapido | BRC70x | — | — |
| Sapido | BRC76n | — | — |
| Sapido | BRD70n | — | — |
| Sapido | BRE70n | — | — |
| Sapido | BRE71n | — | — |
| Sapido | BRF61c | — | — |
| Sapido | BRF71n | — | — |
References
- https://www.twcert.org.tw/tw/cp-132-10197-524ea-1.html third-party-advisory
- https://www.twcert.org.tw/en/cp-139-10198-55217-2.html third-party-advisory