A race condition exists in the cloud-based Omada device adoption process when an attacker may be able to interact with the adoption workflow before a legitimate device completes registration, resulting in provisioning information being delivered to an attacker. Successful exploitation may allow disclosure of provisioning information intended for a legitimate device.
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XTp Link Omada Er605
HWTp-Linkall versionsTp Link Omada Er605 Firmware
OSTp-Linkall versionsTp Link Omada Er703wp 4g Outdoor
HWTp-Linkall versionsTp Link Omada Er703wp 4g Outdoor Firmware
OSTp-Linkall versionsTp Link Omada Er706w
HWTp-Linkall versionsTp Link Omada Er706w 4g
HWTp-Linkall versionsTp Link Omada Er706w 4g Firmware
OSTp-Linkall versionsTp Link Omada Er706w Firmware
OSTp-Linkall versionsTp Link Omada Er706wp 4g
HWTp-Linkall versionsTp Link Omada Er706wp 4g Firmware
OSTp-Linkall versionsTp Link Omada Er707 M2
HWTp-Linkall versionsTp Link Omada Er707 M2 Firmware
OSTp-Linkall versionsTp Link Omada Er7206
HWTp-Linkall versionsTp Link Omada Er7206 Firmware
OSTp-Linkall versionsTp Link Omada Er7412 M2
HWTp-Linkall versionsTp Link Omada Er7412 M2 Firmware
OSTp-Linkall versionsTp Link Omada Er8411
HWTp-Linkall versionsTp Link Omada Er8411 Firmware
OSTp-Linkall versionsTp Link Omada Fusion 2.5g
HWTp-Linkall versionsTp Link Omada Fusion 2.5g Firmware
OSTp-Linkall versionsTp Link Omada Oc200 V3
HWTp-Linkall versionsTp Link Omada Oc200 V3 Firmware
OSTp-Linkall versionsTp Link Omada Oc300
HWTp-Linkall versionsTp Link Omada Oc300 Firmware
OSTp-Linkall versionsTp Link Omada Oc400
HWTp-Linkall versionsTp Link Omada Oc400 Firmware
OSTp-Linkall versionsTp Link Omada S6500 24g4xf
HWTp-Linkall versionsTp Link Omada S6500 24g4xf Firmware
OSTp-Linkall versionsTp Link Omada S6500 24gp4xf
HWTp-Linkall versionsTp Link Omada S6500 24gp4xf Firmware
OSTp-Linkall versions
Related vulnerabilities
RCE z uprawnieniami root w TP-Link Omada ER605 via buffer overflow
Omada: błąd weryfikacji certyfikatu TLS umożliwia atak man-in-the-middle
Omada: współdzielone certyfikaty umożliwiają podszywanie się pod kontrolery
The web interface on multiple Omada switches does not adequately validate certain external inputs, which may l...
TP-Link Omada ER605 Comexe DDNS Response Handling Heap-based Buffer Overflow Remote Code Execution Vulnerabil...