VulnSocial

CVE-2019-25487Disclosure

LOWCVSS 9.3 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

SAPIDO RB-1732 V2.0.43 contains a remote command execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious input to the formSysCmd endpoint. Attackers can send POST requests with the sysCmd parameter containing shell commands to execute code on the device with router privileges.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-639

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-03-11); latest day: 1
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-03-11: 2Mentions · 2026-03-12: 1Technical Details · 2026-03-11: 2Technical Details · 2026-03-12: 103-1103-12
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-03-112
Disclosure1General1
2026-03-121
Disclosure1
Full discourse3 posts
  • CVE@CVEnew
    Disclosure

    CVE-2019-25487 SAPIDO RB-1732 V2.0.43 contains a remote command execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting mali… https://www.cve.org/CVERecord?id=CVE-2019-25487

    Post summary

    The post announces CVE-2019‑25487, describing a remote command execution flaw in SAPIDO RB‑1732 V2.0.43 that allows unauthenticated attackers to run arbitrary commands, with no PoC, exploit, or patch details provided.

    00000155
    56.7K followersView on X
  • CVEFind.com@CveFindCom
    General

    [CVE-2019-25487: CRITICAL] SAPIDO RB-1732 V2.0.43 has a critical vulnerability allowing unauthorized access, enabling attackers to execute system commands remotely. #cybersecurity#cve,CVE-2019-25487,#cybersecurity https://cvefind.com/CVE-2019-25487

    Post summary

    A brief announcement of CVE-2019-25487 in SAPIDO with remote command execution vulnerability, lacking details on PoC, exploitation, or remediation.

    0000047
    602 followersView on X
  • 0day Signal@0dayPublishing
    Disclosure

    🚨 CVE-2019-25487: SAPIDO RB-1732 V2.0.43 Remote Co... Unauthenticated RCE via formSysCmd parameter = instant router pwn with a single POST request - classic IoT garbage stri... https://zerodaysignal.com/vulnerability/CVE-2019-25487 #netsec #vulnerability #CVE #sysadmin #zeroday

    Post summary

    The post discloses CVE‑2019‑25487, an unauthenticated remote code execution flaw in SAPIDO RB‑1732 V2.0.43 that can be triggered with a single POST request to the formSysCmd parameter. No patch, tool, or evidence of active exploitation is mentioned.

    0000052
    143 followersView on X

Explore more

Back to dashboard