CVEvulnerability

CVE-2025-15627

6.9 MEDIUM Published 2026-08-03 Modified 2026-09-29 Official page ↗
Status
Analyzed
Published
2026-08-03
Last modified
2026-09-29
Assigner
f23511db-6c3e-4e32-a477-6aa17d310630
CVSS 4.0 (f23511db-6c3e-4e32-a477-6aa17d310630)
6.9 MEDIUM — CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-321

Description

A cryptographic weakness exists in the Omada adoption protocol.  The protocol relies on hard-coded cryptographic keys to establish trust and protect authentication exchanges between controllers and managed devices during device adoption. An attacker may be able to impersonate trusted controllers or managed devices and gain access to sensitive adoption-related communications.

Affected configurations

• tp-link omada oc200 v3 firmware • tp-link omada oc300 firmware • tp-link omada oc400 firmware • tp-link omada fusion 2.5g firmware • tp-link omada er707-m2 firmware • tp-link omada tl-sg3452x firmware • tp-link omada sg3428xmpp firmware • tp-link omada sg3428xmp firmware • tp-link omada sg3428x firmware • tp-link omada sg2005p-pd firmware • tp-link omada sg3452p firmware • tp-link omada sg3452 firmware • tp-link omada sg3428mp firmware • tp-link omada sg3428 firmware • tp-link omada sg3210 firmware • tp-link omada tl-sg3210 firmware • tp-link omada sg2452lp firmware • tp-link omada sg2428p firmware • tp-link omada sg2428lp firmware • tp-link omada sg2218p firmware • tp-link omada sg2218 firmware • tp-link omada sg2016p firmware • tp-link omada sg2210mp firmware • tp-link omada sg2210p firmware • tp-link omada sg2008p firmware • tp-link omada sg2008 firmware • tp-link omada sg2206mp firmware • tp-link omada es210xpp-m2 firmware • tp-link omada es210x-m2 firmware • tp-link omada es206xpp-m2 firmware • tp-link omada es206x-m2 firmware • tp-link omada es228gmp firmware • tp-link omada es228gp firmware • tp-link omada es224g firmware • tp-link omada es220gp firmware • tp-link omada es216g firmware • tp-link omada es210gmp firmware • tp-link omada es210gp firmware • tp-link omada es208gp firmware • tp-link omada es208g firmware • tp-link omada es206gp firmware • tp-link omada es205gp firmware • tp-link omada es205g firmware • tp-link omada es220gmp firmware • tp-link omada es1024ge firmware • tp-link omada ds1016ge firmware • tp-link omada ds108ge firmware • tp-link omada ds105ge firmware • tp-link omada ds1008x firmware • tp-link omada ds105x firmware • tp-link omada ds108g-m2 firmware • tp-link omada ds105g-m2 firmware • tp-link omada ds1024g firmware • tp-link omada ds1016g firmware • tp-link omada ds110gmp firmware • tp-link omada ds108g firmware • tp-link omada ds106gpp firmware • tp-link omada ds106p firmware • tp-link omada ds105g firmware • tp-link omada ds111p firmware … and 52 more

Related

Weakness · CWE (1)

  • CWE-321 Use of Hard-coded Cryptographic Key weakness

References