HIGH🇵🇱 Wersja polska

CVE-2025-15628

CVSS 8.2v4.0pub. 2026-08-03upd. 2026-08-07

Affected Omada devices rely on embedded certificates that are shared across deployments to establish trust between controllers and managed devices. An attacker who obtains the embedded certificates may be able to impersonate trusted controllers or devices and intercept affected communications.

CVSS Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Tp Link Omada Er605

    HW
    Tp-Link
    all versions

  • Tp Link Omada Er605 Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Omada Er706w

    HW
    Tp-Link
    all versions

  • Tp Link Omada Er706w Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Omada Er707 M2

    HW
    Tp-Link
    all versions

  • Tp Link Omada Er707 M2 Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Omada Er7206

    HW
    Tp-Link
    all versions

  • Tp Link Omada Er7206 Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Omada Er7412 M2

    HW
    Tp-Link
    all versions

  • Tp Link Omada Er7412 M2 Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Omada Er8411

    HW
    Tp-Link
    all versions

  • Tp Link Omada Er8411 Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Omada Es1024ge

    HW
    Tp-Link
    all versions

  • Tp Link Omada Es1024ge Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Omada Es205g

    HW
    Tp-Link
    all versions

  • Tp Link Omada Es205g Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Omada Es205gp

    HW
    Tp-Link
    all versions

  • Tp Link Omada Es205gp Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Omada Es206gp

    HW
    Tp-Link
    all versions

  • Tp Link Omada Es206gp Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Omada Es206x M2

    HW
    Tp-Link
    all versions

  • Tp Link Omada Es206x M2 Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Omada Es206xpp M2

    HW
    Tp-Link
    all versions

  • Tp Link Omada Es206xpp M2 Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Omada Es208g

    HW
    Tp-Link
    all versions

  • Tp Link Omada Es208g Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Omada Es208gp

    HW
    Tp-Link
    all versions

  • Tp Link Omada Es208gp Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Omada Es210gmp

    HW
    Tp-Link
    all versions

  • Tp Link Omada Es210gmp Firmware

    OS
    Tp-Link
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-25139CRITICAL10.0PL ✓same product

RCE z uprawnieniami root w TP-Link Omada ER605 via buffer overflow

CVE-2025-9291HIGH7.7PL ✓same product

Omada: błąd weryfikacji certyfikatu TLS umożliwia atak man-in-the-middle

CVE-2026-1668HIGH7.7same product

The web interface on multiple Omada switches does not adequately validate certain external inputs, which may l...

CVE-2024-5228HIGH7.5same product

TP-Link Omada ER605 Comexe DDNS Response Handling Heap-based Buffer Overflow Remote Code Execution Vulnerabil...

CVE-2024-5227HIGH7.5same product

TP-Link Omada ER605 PPTP VPN username Command Injection Remote Code Execution Vulnerability. This vulnerabilit...