TP-Link Systems Inc. Omada Software Controller güvenlik açıkları (CVE)

TP-Link Systems Inc. Omada Software Controller için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

3 sonuç
6.0Orta
CVE-2025-9290

Authentication Weakness on Omada Controllers, Gateways and Access Points

TP-Link Systems Inc. Omada Software Controller; TP-Link Systems Inc. Omada Cloud Controller; TP-Link Systems Inc. Omada Hardware Controller (OC200, OC300, OC400); TP-Link Systems Inc. Omada Hardware Controller OC220

An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values. Exploitation requires advanced network positioning and allows an attacker to intercept adoption t…

5.7Orta
CVE-2025-9289

Cross-Site Scripting (XSS) on Omada Controllers

TP-Link Systems Inc. Omada Software Controller; TP-Link Systems Inc. Omada OC200, OC220, OC300, OC400; TP-Link Systems Inc. Omada cloud controller

A Cross-Site Scripting (XSS) vulnerability was identified in a parameter in Omada Controllers due to improper input sanitization. Exploitation requires advanced conditions, such as network positioning or emulating a trusted entity, and user interaction by an …