CVSS 4.0
7.7 highCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:NCVE-2025-9291
High (7.7) in tp-link. EPSS 0.2% chance of exploitation in the next 30 days.
A
certification validation weakness exists in communication between affected
Omada devices and cloud controllers. Certificate identity verification does not
adequately validate that a presented certificate corresponds to the expected
cloud controller hostname, which may allow certificate validation protections
to be bypassed under specific conditions.
Successful
exploitation may allow interception or modification of communication between
affected devices and cloud controllers.
Severity
CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
- CWE
- CWE-295
- Published
- Modified
- Record from
- the NVD, synced
Affected
- tp-link:omada_ds1008x_firmware
- tp-link:omada_ds1016g_firmware
- tp-link:omada_ds1016ge_firmware
- tp-link:omada_ds1018gmp_firmware
- tp-link:omada_ds1024g_firmware
- tp-link:omada_ds105g-m2_firmware
- tp-link:omada_ds105g_firmware
- tp-link:omada_ds105ge_firmware
- tp-link:omada_ds105gp_firmware
- tp-link:omada_ds105x_firmware
- tp-link:omada_ds106gpp_firmware
- tp-link:omada_ds106p_firmware
- tp-link:omada_ds108g-m2_firmware
- tp-link:omada_ds108g_firmware
- tp-link:omada_ds108ge_firmware
- tp-link:omada_ds108gp_firmware
- tp-link:omada_ds110gmp_firmware
- tp-link:omada_ds111p_firmware
- tp-link:omada_eap610-outdoor_firmware
- tp-link:omada_eap610_firmware
- tp-link:omada_eap615-wall_firmware
- tp-link:omada_eap620hd_firmware
- tp-link:omada_eap660hd_firmware
- tp-link:omada_er605_firmware
- tp-link:omada_er703wp-4g-outdoor_firmware
- tp-link:omada_er706w-4g_firmware
- tp-link:omada_er706w_firmware
- tp-link:omada_er706wp-4g_firmware
- tp-link:omada_er707-m2_firmware
- tp-link:omada_er7206_firmware
- tp-link:omada_er7412-m2_firmware
- tp-link:omada_er8411_firmware
- tp-link:omada_es1024ge_firmware
- tp-link:omada_es205g_firmware
- tp-link:omada_es205gp_firmware
- tp-link:omada_es206gp_firmware
- tp-link:omada_es206x-m2_firmware
- tp-link:omada_es206xpp-m2_firmware
- tp-link:omada_es208g_firmware
- tp-link:omada_es208gp_firmware
- tp-link:omada_es210gmp_firmware
- tp-link:omada_es210gp_firmware
- tp-link:omada_es210x-m2_firmware
- tp-link:omada_es210xpp-m2_firmware
- tp-link:omada_es216g_firmware
- tp-link:omada_es220gmp_firmware
- tp-link:omada_es220gp_firmware
- tp-link:omada_es224g_firmware
- tp-link:omada_es228gmp_firmware
- tp-link:omada_es228gp_firmware