8.3Alta
CVE-2025-9520IDOR Leading to Owner Account Hijacking in Omada Controller
Descripción
An IDOR vulnerability exists in Omada Controllers that allows an attacker with Administrator permissions to manipulate requests and potentially hijack the Owner account.
Debilidad (CWE):
CWE-639
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| TP-Link Systems Inc. | Omada Controller | < 6.0 |
Referencias y parches
- https://support.omadanetworks.com/us/document/115200/ vendor-advisoryVendor Advisory
- https://support.omadanetworks.com/us/download/software/omada-controller/ patchProduct
Coincidencias CPE (NVD) (1)
cpe:2.3:o:tp-link:omada_controller:*:*:*:*:*:*:*:*< 6.0