CVE-2025-9290

An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values. Exploitation requires advanced network positioning and allows an attacker to intercept adoption traffic and forge valid authentication through offline precomputation, potentially exposing sensitive information and compromising confidentiality.

• tp-link omada controller (< 6.0.0.24) • tp-link omada controller (< 6.0.0.100) • tp-link oc200 firmware (< 1.37.9) • tp-link oc220 firmware (< 1.1.3) • tp-link oc300 firmware (< 1.31.9) • tp-link oc400 firmware (< 1.9.9) • tp-link oc200 firmware (< 2.22.9) • tp-link oc220 firmware • tp-link er605 firmware (< 2.3.2) • tp-link er7206 firmware (< 2.2.2) • tp-link er7406 firmware (< 1.2.2) • tp-link er707-m2 firmware (< 1.3.1) • tp-link er7412-m2 firmware (< 1.1.0) • tp-link er8411 firmware (< 1.3.5) • tp-link er706w firmware (< 1.2.1) • tp-link er706w-4g firmware (< 1.2.1) • tp-link er706wp-4g firmware (< 1.1.0) • tp-link er703wp-4g-outdoor firmware (< 1.1.0) • tp-link dr3220v-4g firmware (< 1.1.0) • tp-link dr3650v-4g firmware (< 1.1.0) • tp-link dr3650v firmware (< 1.1.0) • tp-link er701-5g-outdoor firmware (< 1.0.0) • tp-link er605w firmware (< 2.0.2) • tp-link er7212pc firmware (< 2.2.1) • tp-link fr365 firmware (< 1.1.10) • tp-link g36w-4g firmware (< 1.1.5) • tp-link eap655-wall firmware (< 1.6.2) • tp-link eap660 hd firmware (< 1.6.1) • tp-link eap620 hd firmware (< 1.6.1) • tp-link eap610-outdoor firmware (< 1.6.1) • tp-link eap610 firmware (< 1.6.1) • tp-link eap623-outdoor hd firmware (< 1.6.1) • tp-link eap625-outdoor hd firmware (< 1.6.1) • tp-link eap772 firmware (< 1.3.2) • tp-link eap772-outdoor firmware (< 1.3.2) • tp-link eap770 firmware (< 1.3.2) • tp-link eap723 firmware (< 1.3.2) • tp-link eap773 firmware (< 1.1.2) • tp-link eap783 firmware (< 1.1.2) • tp-link eap772 firmware (< 1.1.2) • tp-link eap787 firmware (< 1.1.2) • tp-link eap720 firmware (< 1.1.2) • tp-link eap723 firmware (< 1.1.2) • tp-link eap725-wall firmware (< 1.1.2) • tp-link eap215 bridge kit firmware (< 1.1.4) • tp-link eap211 bridge kit firmware (< 1.1.4) • tp-link beam bridge 5 ur firmware (< 1.1.5) • tp-link eap603gp-desktop firmware (< 1.1.0) • tp-link eap615gp-wall firmware (< 1.1.0) • tp-link eap625gp-wall firmware (< 1.1.0) • tp-link eap610gp-desktop firmware (< 1.1.0) • tp-link eap650gp-desktop firmware (< 1.0.1) • tp-link eap653 firmware (< 1.3.3) • tp-link eap650-outdoor firmware (< 1.3.3) • tp-link eap230-wall firmware (< 3.3.1) • tp-link eap235-wall firmware (< 3.3.1) • tp-link eap603-outdoor firmware (< 1.5.1) • tp-link eap653 ur firmware (< 1.4.2) • tp-link eap650-desktop firmware (< 1.1.0) • tp-link eap615-wall firmware (< 1.1.0) … and 4 more