CVEvulnerability
CVE-2025-15628
8.2 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2026-08-03
- Last modified
- 2026-09-29
- Assigner
- f23511db-6c3e-4e32-a477-6aa17d310630
- CVSS 4.0 (f23511db-6c3e-4e32-a477-6aa17d310630)
- 8.2 HIGH — CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-798
Description
Affected
Omada devices rely on embedded certificates that are shared across deployments
to establish trust between controllers and managed devices.
An attacker
who obtains the embedded certificates may be able to impersonate trusted
controllers or devices and intercept affected communications.
Affected configurations
• tp-link omada oc200 v3 firmware
• tp-link omada oc300 firmware
• tp-link omada oc400 firmware
• tp-link omada fusion 2.5g firmware
• tp-link omada er707-m2 firmware
• tp-link omada tl-sg3452x firmware
• tp-link omada sg3428xmpp firmware
• tp-link omada sg3428xmp firmware
• tp-link omada sg3428x firmware
• tp-link omada sg2005p-pd firmware
• tp-link omada sg3452p firmware
• tp-link omada sg3452 firmware
• tp-link omada sg3428mp firmware
• tp-link omada sg3428 firmware
• tp-link omada sg3210 firmware
• tp-link omada tl-sg3210 firmware
• tp-link omada sg2452lp firmware
• tp-link omada sg2428p firmware
• tp-link omada sg2428lp firmware
• tp-link omada sg2218p firmware
• tp-link omada sg2218 firmware
• tp-link omada sg2016p firmware
• tp-link omada sg2210mp firmware
• tp-link omada sg2210p firmware
• tp-link omada sg2008p firmware
• tp-link omada sg2008 firmware
• tp-link omada sg2206mp firmware
• tp-link omada es210xpp-m2 firmware
• tp-link omada es210x-m2 firmware
• tp-link omada es206xpp-m2 firmware
• tp-link omada es206x-m2 firmware
• tp-link omada es228gmp firmware
• tp-link omada es228gp firmware
• tp-link omada es224g firmware
• tp-link omada es220gp firmware
• tp-link omada es216g firmware
• tp-link omada es210gmp firmware
• tp-link omada es210gp firmware
• tp-link omada es208gp firmware
• tp-link omada es208g firmware
• tp-link omada es206gp firmware
• tp-link omada es205gp firmware
• tp-link omada es205g firmware
• tp-link omada es220gmp firmware
• tp-link omada es1024ge firmware
• tp-link omada er7206 firmware
• tp-link omada er706w firmware
• tp-link omada er8411 firmware
• tp-link omada er605 firmware
• tp-link omada er7412-m2 firmware
• tp-link omada er706w-4g firmware
• tp-link omada er703wp-4g-outdoor firmware
• tp-link omada er706wp-4g firmware
• tp-link omada s7500-24y4c firmware
• tp-link omada s7500-26xf6y firmware
• tp-link omada s6500-48mpp6y firmware
• tp-link omada s6500-24mpp4y firmware
• tp-link omada s6500-48gp6xf firmware
• tp-link omada s6500-48g6xf firmware
• tp-link omada s6500-24gp4xf firmware
… and 52 more
Related
Weakness · CWE (1)
- CWE-798 Use of Hard-coded Credentials weakness