CVSS 4.0
6.9 mediumCVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:NCVE-2025-15544
Medium (6.9) in tp-link. EPSS 0.3% chance of exploitation in the next 30 days.
A cryptographic
weakness exists in the Omada device adoption process. During adoption, authentication credentials associated
with site management are transmitted using a weak hashing algorithm that does
not provide sufficient protection.
An attacker who
successfully intercepts adoption-related authentication traffic may be able to
recover valid credentials and gain unauthorized access to managed devices or
controller-managed environments.
Severity
CVSS 3.1
5.9 mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
- CWE
- CWE-759
- Published
- Modified
- Record from
- the NVD, synced
Affected
- tp-link:omada
- tp-link:omada_ds1008x_firmware
- tp-link:omada_ds1016g_firmware
- tp-link:omada_ds1016ge_firmware
- tp-link:omada_ds1018gmp_firmware
- tp-link:omada_ds1024g_firmware
- tp-link:omada_ds105g-m2_firmware
- tp-link:omada_ds105g_firmware
- tp-link:omada_ds105ge_firmware
- tp-link:omada_ds105gp_firmware
- tp-link:omada_ds105x_firmware
- tp-link:omada_ds106gpp_firmware
- tp-link:omada_ds106p_firmware
- tp-link:omada_ds108g-m2_firmware
- tp-link:omada_ds108g_firmware
- tp-link:omada_ds108ge_firmware
- tp-link:omada_ds108gp_firmware
- tp-link:omada_ds110gmp_firmware
- tp-link:omada_ds111p_firmware
- tp-link:omada_eap610-outdoor_firmware
- tp-link:omada_eap610_firmware
- tp-link:omada_eap615-wall_firmware
- tp-link:omada_eap620hd_firmware
- tp-link:omada_eap660hd_firmware
- tp-link:omada_er605_firmware
- tp-link:omada_er703wp-4g-outdoor_firmware
- tp-link:omada_er706w-4g_firmware
- tp-link:omada_er706w_firmware
- tp-link:omada_er706wp-4g_firmware
- tp-link:omada_er707-m2_firmware
- tp-link:omada_er7206_firmware
- tp-link:omada_er7412-m2_firmware
- tp-link:omada_er8411_firmware
- tp-link:omada_es1024ge_firmware
- tp-link:omada_es205g_firmware
- tp-link:omada_es205gp_firmware
- tp-link:omada_es206gp_firmware
- tp-link:omada_es206x-m2_firmware
- tp-link:omada_es206xpp-m2_firmware
- tp-link:omada_es208g_firmware
- tp-link:omada_es208gp_firmware
- tp-link:omada_es210gmp_firmware
- tp-link:omada_es210gp_firmware
- tp-link:omada_es210x-m2_firmware
- tp-link:omada_es210xpp-m2_firmware
- tp-link:omada_es216g_firmware
- tp-link:omada_es220gmp_firmware
- tp-link:omada_es220gp_firmware
- tp-link:omada_es224g_firmware
- tp-link:omada_es228gmp_firmware