A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing algorithm that does not provide sufficient protection. An attacker who obtains access to stored credential data may be able to recover valid credentials to gain unauthorized access to affected devices or management environments.
CVSS:4.0/AV:A/AC:H/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XTp Link Omada Er605
HWTp-Linkall versionsTp Link Omada Er605 Firmware
OSTp-Linkall versionsTp Link Omada Er703wp 4g Outdoor
HWTp-Linkall versionsTp Link Omada Er703wp 4g Outdoor Firmware
OSTp-Linkall versionsTp Link Omada Er706w
HWTp-Linkall versionsTp Link Omada Er706w 4g
HWTp-Linkall versionsTp Link Omada Er706w 4g Firmware
OSTp-Linkall versionsTp Link Omada Er706w Firmware
OSTp-Linkall versionsTp Link Omada Er706wp 4g
HWTp-Linkall versionsTp Link Omada Er706wp 4g Firmware
OSTp-Linkall versionsTp Link Omada Er707 M2
HWTp-Linkall versionsTp Link Omada Er707 M2 Firmware
OSTp-Linkall versionsTp Link Omada Er7206
HWTp-Linkall versionsTp Link Omada Er7206 Firmware
OSTp-Linkall versionsTp Link Omada Er7412 M2
HWTp-Linkall versionsTp Link Omada Er7412 M2 Firmware
OSTp-Linkall versionsTp Link Omada Er8411
HWTp-Linkall versionsTp Link Omada Er8411 Firmware
OSTp-Linkall versionsTp Link Omada Fusion 2.5g
HWTp-Linkall versionsTp Link Omada Fusion 2.5g Firmware
OSTp-Linkall versionsTp Link Omada S6500 24g4xf
HWTp-Linkall versionsTp Link Omada S6500 24g4xf Firmware
OSTp-Linkall versionsTp Link Omada S6500 24gp4xf
HWTp-Linkall versionsTp Link Omada S6500 24gp4xf Firmware
OSTp-Linkall versionsTp Link Omada S6500 24mpp4y
HWTp-Linkall versionsTp Link Omada S6500 24mpp4y Firmware
OSTp-Linkall versionsTp Link Omada S6500 48g6xf
HWTp-Linkall versionsTp Link Omada S6500 48g6xf Firmware
OSTp-Linkall versionsTp Link Omada S6500 48gp6xf
HWTp-Linkall versionsTp Link Omada S6500 48gp6xf Firmware
OSTp-Linkall versions
Related vulnerabilities
RCE z uprawnieniami root w TP-Link Omada ER605 via buffer overflow
Omada: błąd weryfikacji certyfikatu TLS umożliwia atak man-in-the-middle
Omada: współdzielone certyfikaty umożliwiają podszywanie się pod kontrolery
The web interface on multiple Omada switches does not adequately validate certain external inputs, which may l...
TP-Link Omada ER605 Comexe DDNS Response Handling Heap-based Buffer Overflow Remote Code Execution Vulnerabil...