CVEvulnerability
CVE-2025-9291
7.7 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2026-08-03
- Last modified
- 2026-09-29
- Assigner
- f23511db-6c3e-4e32-a477-6aa17d310630
- CVSS 4.0 (f23511db-6c3e-4e32-a477-6aa17d310630)
- 7.7 HIGH — CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- Weaknesses
- CWE-295
Description
A
certification validation weakness exists in communication between affected
Omada devices and cloud controllers. Certificate identity verification does not
adequately validate that a presented certificate corresponds to the expected
cloud controller hostname, which may allow certificate validation protections
to be bypassed under specific conditions.
Successful
exploitation may allow interception or modification of communication between
affected devices and cloud controllers.
Affected configurations
• tp-link omada fusion 2.5g firmware
• tp-link omada er707-m2 firmware
• tp-link omada er7206 firmware
• tp-link omada er706w firmware
• tp-link omada er8411 firmware
• tp-link omada er605 firmware
• tp-link omada er7412-m2 firmware
• tp-link omada er706w-4g firmware
• tp-link omada er703wp-4g-outdoor firmware
• tp-link omada er706wp-4g firmware
• tp-link omada s7500-24y4c firmware
• tp-link omada s7500-26xf6y firmware
• tp-link omada s6500-48mpp6y firmware
• tp-link omada s6500-24mpp4y firmware
• tp-link omada s6500-48gp6xf firmware
• tp-link omada s6500-48g6xf firmware
• tp-link omada s6500-24gp4xf firmware
• tp-link omada s6500-24g4xf firmware
• tp-link omada sx6632yf firmware
• tp-link omada sx3032f firmware
• tp-link omada sx3016f firmware
• tp-link omada sx3008f firmware
• tp-link omada sg3428xf firmware
• tp-link omada sx3832mpp firmware
• tp-link omada sx3832 firmware
• tp-link omada sx3206hpp firmware
• tp-link omada sg3428xpp-m2 firmware
• tp-link omada sg3428x-m2 firmware
• tp-link omada sg3218xp-m2 firmware
• tp-link omada sg3210xhp-m2 firmware
• tp-link omada sg3210x-m2 firmware
• tp-link omada sg2210xmp-m2 firmware
• tp-link omada sg6654xhp firmware
• tp-link omada sg6654x firmware
• tp-link omada sg6428xhp firmware
• tp-link omada sg6428x firmware
• tp-link omada sg5452xmpp firmware
• tp-link omada sg5452x firmware
• tp-link omada sg5428xmpp firmware
• tp-link omada sg5428x firmware
• tp-link omada sg3452xmpp firmware
• tp-link omada sg3452xp firmware
• tp-link omada tl-sg3452x firmware
• tp-link omada sg3428xmpp firmware
• tp-link omada sg3428xmp firmware
• tp-link omada sg3428x firmware
• tp-link omada sg2005p-pd firmware
• tp-link omada sg3452p firmware
• tp-link omada sg3452 firmware
• tp-link omada sg3428mp firmware
• tp-link omada sg3428 firmware
• tp-link omada sg3210 firmware
• tp-link omada tl-sg3210 firmware
• tp-link omada sg2452lp firmware
• tp-link omada sg2428p firmware
• tp-link omada sg2428lp firmware
• tp-link omada sg2218p firmware
• tp-link omada sg2218 firmware
• tp-link omada sg2016p firmware
• tp-link omada sg2210mp firmware
… and 49 more
Related
Weakness · CWE (1)
- CWE-295 Improper Certificate Validation weakness