Vulnerabilidades de TP-Link Systems Inc Omada Controllers (CVE)

Registros CVE publicados para TP-Link Systems Inc Omada Controllers, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

5 resultados

5.8Media

CVE-2025-15630 hace 3 meses

Device Provisioning Race Condition in TP-Link Omada Adoption Workflow

TP-Link Systems Inc. Omada Gateways; TP-Link Systems Inc. Omada Switches; TP Link Systems Inc. Omada Access Points; TP-Link Systems Inc Omada Controllers

A race condition exists in the cloud-based Omada device adoption process when an attacker may be able to interact with the adoption workflow before a legitimate device completes registration, resulting in provisioning information being delivered to an attacke…

6.9Media

CVE-2025-15629 hace 3 meses

Weak Session Key Generation in TP-Link Omada Adoption Protocol

TP-Link Systems Inc. Omada Gateways; TP-Link Systems Inc. Omada Switches; TP Link Systems Inc. Omada Access Points; TP-Link Systems Inc Omada Controllers

A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation. An attacker …

8.2Alta

CVE-2025-15628 hace 3 meses

Hardcoded Certificates in TP-Link Omada Device Communications

TP-Link Systems Inc. Omada Gateways; TP-Link Systems Inc. Omada Switches; TP Link Systems Inc. Omada Access Points; TP-Link Systems Inc Omada Controllers

Affected Omada devices rely on embedded certificates that are shared across deployments to establish trust between controllers and managed devices. An attacker who obtains the embedded certificates may be able to impersonate trusted controllers or de…

6.9Media

CVE-2025-15627 hace 3 meses

Hardcoded Cryptographic Keys in TP-Link Omada Adoption Protocol Authentication

TP-Link Systems Inc. Omada Gateways; TP-Link Systems Inc. Omada Switches; TP Link Systems Inc. Omada Access Points; TP-Link Systems Inc Omada Controllers

A cryptographic weakness exists in the Omada adoption protocol. The protocol relies on hard-coded cryptographic keys to establish trust and protect authentication exchanges between controllers and managed devices during device adoption. An attacker …

6.9Media

CVE-2025-15544 hace 3 meses

Weak Credential Protection During TP-Link Omada Device Adoption

TP-Link Systems Inc. Omada Gateways; TP-Link Systems Inc. Omada Switches; TP Link Systems Inc. Omada Access Points; TP-Link Systems Inc. Omada App

A cryptographic weakness exists in the Omada device adoption process. During adoption, authentication credentials associated with site management are transmitted using a weak hashing algorithm that does not provide sufficient protection. An attacke…