CVE-2025-15544
A cryptographic weakness exists in the Omada device adoption process. During adoption, authentication credentials associated with site management are transmitted using a weak hashing algorithm that does not provide sufficient protection. An attacker who successfully intercepts adoption-related authentication traffic may be able to recover valid credentials and gain unauthorized access to managed devices or controller-managed environments.
CVSS score5.9 / 10
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NWeakness type (CWE)CWE-759
Vendorstp-link
Affected products
| Vendors | Product | Versions |
|---|---|---|
| tp-link | omada oc200 v3 firmware | - |
| tp-link | omada oc200 v3 | - |
| tp-link | omada oc300 firmware | - |
| tp-link | omada oc300 | - |
| tp-link | omada oc400 firmware | - |
| tp-link | omada oc400 | - |
| tp-link | omada fusion 2.5g firmware | - |
| tp-link | omada fusion 2.5g | - |
| tp-link | omada er707-m2 firmware | - |
| tp-link | omada er707-m2 | - |
| tp-link | omada er7206 firmware | - |
| tp-link | omada er7206 | - |
| tp-link | omada er706w firmware | - |
| tp-link | omada er706w | - |
| tp-link | omada er8411 firmware | - |
| tp-link | omada er8411 | - |
| tp-link | omada er605 firmware | - |
| tp-link | omada er605 | - |
| tp-link | omada er7412-m2 firmware | - |
| tp-link | omada er7412-m2 | - |
| tp-link | omada er706w-4g firmware | - |
| tp-link | omada er706w-4g | - |
| tp-link | omada er703wp-4g-outdoor firmware | - |
| tp-link | omada er703wp-4g-outdoor | - |
| tp-link | omada er706wp-4g firmware | - |
Related articles
This product uses the NVD API but is not endorsed or certified by the NVD.
