8.3Hoch
CVE-2025-9520IDOR Leading to Owner Account Hijacking in Omada Controller
Beschreibung
An IDOR vulnerability exists in Omada Controllers that allows an attacker with Administrator permissions to manipulate requests and potentially hijack the Owner account.
Schwachstellentyp (CWE):
CWE-639
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| TP-Link Systems Inc. | Omada Controller | < 6.0 |
Referenzen und Patches
- https://support.omadanetworks.com/us/document/115200/ vendor-advisoryVendor Advisory
- https://support.omadanetworks.com/us/download/software/omada-controller/ patchProduct
CPE-Treffer (NVD) (1)
cpe:2.3:o:tp-link:omada_controller:*:*:*:*:*:*:*:*< 6.0