6.9Medium
CVE-2025-15544Weak Credential Protection During TP-Link Omada Device Adoption
Description
A cryptographic weakness exists in the Omada device adoption process. During adoption, authentication credentials associated with site management are transmitted using a weak hashing algorithm that does not provide sufficient protection. An attacker who successfully intercepts adoption-related authentication traffic may be able to recover valid credentials and gain unauthorized access to managed devices or controller-managed environments.
Weakness (CWE):
CWE-759
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
References and patches
- https://www.omadanetworks.com/us/support/download/ patchProduct
- https://www.omadanetworks.com/en/support/download/ patchProduct
- https://www.tp-link.com/us/support/faq/5216/ vendor-advisoryVendor Advisory
CPE matches (NVD) (60)
cpe:2.3:o:tp-link:omada_oc200_v3_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_oc300_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_oc400_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_fusion_2.5g_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_er707-m2_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_er7206_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_er706w_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_er8411_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_er605_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_er7412-m2_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_er706w-4g_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_er703wp-4g-outdoor_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_er706wp-4g_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_s7500-24y4c_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_s7500-26xf6y_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_s6500-48mpp6y_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_s6500-24mpp4y_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_s6500-48gp6xf_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_s6500-48g6xf_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_s6500-24gp4xf_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_s6500-24g4xf_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sx6632yf_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sx3032f_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sx3016f_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sx3008f_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg3428xf_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sx3832mpp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sx3832_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sx3206hpp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg3428xpp-m2_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg3428x-m2_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg3218xp-m2_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg3210xhp-m2_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg3210x-m2_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg2210xmp-m2_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg6654xhp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg6654x_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg6428xhp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg6428x_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg5452xmpp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg5452x_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg5428xmpp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg5428x_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg3452xmpp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg3452xp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_tl-sg3452x_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg3428xmpp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg3428xmp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg3428x_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg2005p-pd_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg3452p_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg3452_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg3428mp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg3428_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg3210_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_tl-sg3210_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg2452lp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg2428p_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg2428lp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:tp-link:omada_sg2218p_firmware:-:*:*:*:*:*:*:*