CRITICAL🇵🇱 Wersja polska

CVE-2025-7850

CVSS 9.3v4.0pub. 2025-10-21upd. 2025-10-24

A command injection vulnerability may be exploited after the admin's authentication on the web portal on Omada gateways.

🤖 AI Analysis
How it works

After logging into the web portal administrative panel, an attacker can provide specially crafted input data that is not properly validated or sanitized (CWE-78). This results in passing untrusted data directly to the device's system command interpreter. The exploit therefore requires possession of administrator credentials or takeover of an active administrative session.

Impact

An attacker with administrator privileges can execute arbitrary system commands on the device, which may lead to complete takeover of the gateway, loss of data confidentiality and integrity, and disruption of network availability served by the device.

Mitigation & patch

Apply patches available from the manufacturer according to references (including https://support.omadanetworks.com/en/document/108456/). Until the update is applied, it is recommended to restrict access to the administrative panel only to trusted hosts and avoid exposing the management interface to the public network.

Who is affected

TP-Link FR307-M2 Firmware, TP-Link G36, TP-Link ER707-M2, TP-Link ER706W Firmware, TP-Link ER7206 Firmware (Omada series gateways); specific firmware versions indicated in manufacturer references.

Analysis generated by Claude AI (Anthropic) based on NVD data. Always verify with vendor.
CVSS Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Tp Link Er605

    HW
    Tp-Link
    all versions

  • Tp Link Er605 Firmware

    OS
    Tp-Link
    2.3.1< 2.3.1

  • Tp Link Er706w

    HW
    Tp-Link
    all versions

  • Tp Link Er706w 4g

    HW
    Tp-Link
    all versions

  • Tp Link Er706w 4g Firmware

    OS
    Tp-Link
    1.2.1< 1.2.1

  • Tp Link Er706w Firmware

    OS
    Tp-Link
    1.2.1< 1.2.1

  • Tp Link Er707 M2

    HW
    Tp-Link
    all versions

  • Tp Link Er707 M2 Firmware

    OS
    Tp-Link
    1.3.1< 1.3.1

  • Tp Link Er7206

    HW
    Tp-Link
    all versions

  • Tp Link Er7206 Firmware

    OS
    Tp-Link
    2.2.2< 2.2.2

  • Tp Link Er7212pc

    HW
    Tp-Link
    all versions

  • Tp Link Er7212pc Firmware

    OS
    Tp-Link
    2.1.3< 2.1.3

  • Tp Link Er7412 M2

    HW
    Tp-Link
    all versions

  • Tp Link Er7412 M2 Firmware

    OS
    Tp-Link
    1.1.0< 1.1.0

  • Tp Link Er8411

    HW
    Tp-Link
    all versions

  • Tp Link Er8411 Firmware

    OS
    Tp-Link
    1.3.3< 1.3.3

  • Tp Link Fr205

    HW
    Tp-Link
    all versions

  • Tp Link Fr205 Firmware

    OS
    Tp-Link
    1.0.3< 1.0.3

  • Tp Link Fr307 M2

    HW
    Tp-Link
    all versions

  • Tp Link Fr307 M2 Firmware

    OS
    Tp-Link
    1.2.5< 1.2.5

  • Tp Link Fr365

    HW
    Tp-Link
    all versions

  • Tp Link Fr365 Firmware

    OS
    Tp-Link
    1.1.10< 1.1.10

  • Tp Link G36

    HW
    Tp-Link
    all versions

  • Tp Link G36 Firmware

    OS
    Tp-Link
    1.1.4< 1.1.4

  • Tp Link G611

    HW
    Tp-Link
    all versions

  • Tp Link G611 Firmware

    OS
    Tp-Link
    1.2.2< 1.2.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Command Injection
CWE
References

Related vulnerabilities

CVE-2026-19586CRITICAL9.3same product

A pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to op...

CVE-2025-6542CRITICAL9.3PL ✓same product

Zdalne wykonanie poleceń OS bez uwierzytelnienia w routerach TP-Link Omada

CVE-2025-7851HIGH8.7same product

An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gate...

CVE-2025-6541HIGH8.6same product

An arbitrary OS command may be executed on the product by the user who can log in to the web management interf...

CVE-2024-21827HIGH7.2same product

A leftover debug code vulnerability exists in the cli_server debug functionality of Tp-Link ER7206 Omada Gigab...