cve.bz

CVE-2025-15631

5.7 mediumEPSS 0.3%

Medium (5.7) in tp-link. EPSS 0.3% chance of exploitation in the next 30 days.

A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing algorithm that does not provide sufficient protection. An attacker who obtains access to stored credential data may be able to recover valid credentials to gain unauthorized access to affected devices or management environments.

Severity

CVSS 4.0

5.7 medium
CVSS:4.0/AV:A/AC:H/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

5.9 medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
CWE
CWE-759
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON