TP-Link Systems Inc Omada Controllers güvenlik açıkları (CVE)

TP-Link Systems Inc Omada Controllers için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

5 sonuç

5.8Orta

CVE-2025-15630 3 ay önce

Device Provisioning Race Condition in TP-Link Omada Adoption Workflow

TP-Link Systems Inc. Omada Gateways; TP-Link Systems Inc. Omada Switches; TP Link Systems Inc. Omada Access Points; TP-Link Systems Inc Omada Controllers

A race condition exists in the cloud-based Omada device adoption process when an attacker may be able to interact with the adoption workflow before a legitimate device completes registration, resulting in provisioning information being delivered to an attacke…

6.9Orta

CVE-2025-15629 3 ay önce

Weak Session Key Generation in TP-Link Omada Adoption Protocol

TP-Link Systems Inc. Omada Gateways; TP-Link Systems Inc. Omada Switches; TP Link Systems Inc. Omada Access Points; TP-Link Systems Inc Omada Controllers

A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation. An attacker …

8.2Yüksek

CVE-2025-15628 3 ay önce

Hardcoded Certificates in TP-Link Omada Device Communications

TP-Link Systems Inc. Omada Gateways; TP-Link Systems Inc. Omada Switches; TP Link Systems Inc. Omada Access Points; TP-Link Systems Inc Omada Controllers

Affected Omada devices rely on embedded certificates that are shared across deployments to establish trust between controllers and managed devices. An attacker who obtains the embedded certificates may be able to impersonate trusted controllers or de…

6.9Orta

CVE-2025-15627 3 ay önce

Hardcoded Cryptographic Keys in TP-Link Omada Adoption Protocol Authentication

TP-Link Systems Inc. Omada Gateways; TP-Link Systems Inc. Omada Switches; TP Link Systems Inc. Omada Access Points; TP-Link Systems Inc Omada Controllers

A cryptographic weakness exists in the Omada adoption protocol. The protocol relies on hard-coded cryptographic keys to establish trust and protect authentication exchanges between controllers and managed devices during device adoption. An attacker …

6.9Orta

CVE-2025-15544 3 ay önce

Weak Credential Protection During TP-Link Omada Device Adoption

TP-Link Systems Inc. Omada Gateways; TP-Link Systems Inc. Omada Switches; TP Link Systems Inc. Omada Access Points; TP-Link Systems Inc. Omada App

A cryptographic weakness exists in the Omada device adoption process. During adoption, authentication credentials associated with site management are transmitted using a weak hashing algorithm that does not provide sufficient protection. An attacke…