CVE-2021-4242mediumCWE-707

CVE-2021-4242: medium-severity vulnerability in Sapido BR270n

Sapido BR270n/BRC76n/GR297/RB1732 syscmd.htm os command injection

Published · Updated

Follow this CVE+ Monitor BR270n+ Monitor BRC76n

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.3epss 3.2%
A vulnerability was found in Sapido BR270n, BRC76n, GR297 and RB1732 and classified as critical. Affected by this issue is some unknown functionality of the file ip/syscmd.htm. The manipulation leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214592.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected products
Sapido · BR270nSapido · BRC76nSapido · GR297Sapido · RB1732
Related CVEs — Sapido BR270n

In the same product, most dangerous first.

CVE-2025-6559CRITICALSapido Wireless Router - OS Command InjectionEPSS 1.7%CVE-2025-6560CRITICALSapido Wireless Router - Exposure of Sensitive InformationEPSS 0.6%