The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests. Under specific conditions, this flaw may result in unintended command execution.<br>An unauthenticated attacker with network access to the affected interface may cause memory corruption, service instability, or information disclosure. Successful exploitation may allow remote code execution or denial-of-service.
oryginał ENCVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XTp Link Omada Sg2005p Pd
HWTp-Linkwszystkie wersjeTp Link Omada Sg2005p Pd Firmware
OSTp-Link1.0.0 – 1.0.19 (bez)Tp Link Omada Sg2008
HWTp-Linkwszystkie wersjeTp Link Omada Sg2008 Firmware
OSTp-Link4.20.0 – 4.20.17 (bez)4.30.0 – 4.30.1 (bez)Tp Link Omada Sg2008p
HWTp-Linkwszystkie wersjeTp Link Omada Sg2008p Firmware
OSTp-Link3.30.0 – 3.30.1 (bez)3.20.0 – 3.20.17 (bez)Tp Link Omada Sg2016p
HWTp-Linkwszystkie wersjeTp Link Omada Sg2016p Firmware
OSTp-Link1.20.0 – 1.20.17 (bez)1.30.0 – 1.30.1 (bez)Tp Link Omada Sg2210mp
HWTp-Linkwszystkie wersjeTp Link Omada Sg2210mp Firmware
OSTp-Link4.20.0 – 4.20.18 (bez)5.0.0 – 5.0.15 (bez)5.20.0 – 5.20.1 (bez)Tp Link Omada Sg2210p
HWTp-Linkwszystkie wersjeTp Link Omada Sg2210p Firmware
OSTp-Link5.20.0 – 5.20.18 (bez)5.30.0 – 5.30.1 (bez)Tp Link Omada Sg2210xmp M2
HWTp-Linkwszystkie wersjeTp Link Omada Sg2210xmp M2 Firmware
OSTp-Link1.0.0 – 1.0.19 (bez)Tp Link Omada Sg2218
HWTp-Linkwszystkie wersjeTp Link Omada Sg2218 Firmware
OSTp-Link1.20.0 – 1.20.17 (bez)1.30.0 – 1.30.1 (bez)Tp Link Omada Sg2218p
HWTp-Linkwszystkie wersjeTp Link Omada Sg2218p Firmware
OSTp-Link2.0.0 – 2.0.14 (bez)1.20.0 – 1.20.17 (bez)2.20.0 – 2.20.2 (bez)Tp Link Omada Sg2428lp
HWTp-Linkwszystkie wersjeTp Link Omada Sg2428lp Firmware
OSTp-Link1.0.0 – 1.0.13 (bez)Tp Link Omada Sg2428p
HWTp-Linkwszystkie wersjeTp Link Omada Sg2428p Firmware
OSTp-Link5.30.0 – 5.30.16 (bez)5.20.0 – 5.20.20 (bez)Tp Link Omada Sg2452lp
HWTp-Linkwszystkie wersjeTp Link Omada Sg2452lp Firmware
OSTp-Link1.0.0 – 1.0.13 (bez)Tp Link Omada Sg3210
HWTp-Linkwszystkie wersjeTp Link Omada Sg3210 Firmware
OSTp-Link3.20.0 – 3.20.17 (bez)3.30.0 – 3.30.1 (bez)Tp Link Omada Sg3210xhp M2
HWTp-Linkwszystkie wersjeTp Link Omada Sg3210xhp M2 Firmware
OSTp-Link3.0.0 – 3.0.21 (bez)Tp Link Omada Sg3210x M2
HWTp-Linkwszystkie wersjeTp Link Omada Sg3210x M2 Firmware
OSTp-Link1.20.0 – 1.20.1 (bez)
Powiązane podatności
Omada: współdzielone certyfikaty umożliwiają podszywanie się pod kontrolery
Omada: błąd weryfikacji certyfikatu TLS umożliwia atak man-in-the-middle
A cryptographic weakness exists in the Omada device adoption process. During adoption, authentication credent...
A race condition exists in the cloud-based Omada device adoption process when an attacker may be able to inter...
A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy ...