5.9

CVE-2025-9290

Authentication Weakness on Omada Controllers, Gateways and Access Points

An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values. Exploitation requires advanced network positioning and allows an attacker to intercept adoption traffic and forge valid authentication through offline precomputation, potentially exposing sensitive information and compromising confidentiality.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tp-link ≫ Omada Controller SwEdition - Version < 6.0.0.24
Tp-link ≫ Omada Controller SwEdition cloud Version < 6.0.0.100
Tp-link ≫ Oc200 Firmware Version < 1.37.9
   Tp-link ≫ Oc200 Version 1
Tp-link ≫ Oc220 Firmware Version < 1.1.3
   Tp-link ≫ Oc220 Version 1
Tp-link ≫ Oc300 Firmware Version < 1.31.9
   Tp-link ≫ Oc300 Version 1.6
Tp-link ≫ Oc400 Firmware Version < 1.9.9
   Tp-link ≫ Oc400 Version 1.6
Tp-link ≫ Oc200 Firmware Version < 2.22.9
   Tp-link ≫ Oc200 Version 2
Tp-link ≫ Oc220 Firmware Version -
   Tp-link ≫ Oc220 Version 2
Tp-link ≫ Er605 Firmware Version < 2.3.2
   Tp-link ≫ Er605 Version 2.0
Tp-link ≫ Er7206 Firmware Version < 2.2.2
   Tp-link ≫ Er7206 Version 2.0
Tp-link ≫ Er7406 Firmware Version < 1.2.2
   Tp-link ≫ Er7406 Version -
Tp-link ≫ Er707-m2 Firmware Version < 1.3.1
   Tp-link ≫ Er707-m2 Version -
Tp-link ≫ Er7412-m2 Firmware Version < 1.1.0
   Tp-link ≫ Er7412-m2 Version -
Tp-link ≫ Er8411 Firmware Version < 1.3.5
   Tp-link ≫ Er8411 Version -
Tp-link ≫ Er706w Firmware Version < 1.2.1
   Tp-link ≫ Er706w Version -
Tp-link ≫ Er706w-4g Firmware Version < 1.2.1
   Tp-link ≫ Er706w-4g Version -
Tp-link ≫ Er706wp-4g Firmware Version < 1.1.0
   Tp-link ≫ Er706wp-4g Version -
Tp-link ≫ Er703wp-4g-outdoor Firmware Version < 1.1.0
   Tp-link ≫ Er703wp-4g-outdoor Version -
Tp-link ≫ Dr3220v-4g Firmware Version < 1.1.0
   Tp-link ≫ Dr3220v-4g Version -
Tp-link ≫ Dr3650v-4g Firmware Version < 1.1.0
   Tp-link ≫ Dr3650v-4g Version -
Tp-link ≫ Dr3650v Firmware Version < 1.1.0
   Tp-link ≫ Dr3650v Version -
Tp-link ≫ Er701-5g-outdoor Firmware Version < 1.0.0
   Tp-link ≫ Er701-5g-outdoor Version -
Tp-link ≫ Er605w Firmware Version < 2.0.2
   Tp-link ≫ Er605w Version 2.0
Tp-link ≫ Er7212pc Firmware Version < 2.2.1
   Tp-link ≫ Er7212pc Version 2.0
Tp-link ≫ Fr365 Firmware Version < 1.1.10
   Tp-link ≫ Fr365 Version -
Tp-link ≫ G36w-4g Firmware Version < 1.1.5
   Tp-link ≫ G36w-4g Version -
Tp-link ≫ Eap655-wall Firmware Version < 1.6.2
   Tp-link ≫ Eap655-wall Version 1.0
Tp-link ≫ Eap660 Hd Firmware Version < 1.6.1
   Tp-link ≫ Eap660 Hd Version 1.0
   Tp-link ≫ Eap660 Hd Version 2.0
Tp-link ≫ Eap620 Hd Firmware Version < 1.6.1
   Tp-link ≫ Eap620 Hd Version 3.0
   Tp-link ≫ Eap620 Hd Version 3.20
Tp-link ≫ Eap610-outdoor Firmware Version < 1.6.1
   Tp-link ≫ Eap610-outdoor Version 1.0
   Tp-link ≫ Eap610-outdoor Version 1.20
Tp-link ≫ Eap610 Firmware Version < 1.6.1
   Tp-link ≫ Eap610 Version 1.0
   Tp-link ≫ Eap610 Version 2.0
Tp-link ≫ Eap623-outdoor Hd Firmware Version < 1.6.1
   Tp-link ≫ Eap623-outdoor Hd Version 1.0
Tp-link ≫ Eap625-outdoor Hd Firmware Version < 1.6.1
   Tp-link ≫ Eap625-outdoor Hd Version 1.0
Tp-link ≫ Eap772 Firmware Version < 1.3.2
   Tp-link ≫ Eap772 Version 2.0
Tp-link ≫ Eap772-outdoor Firmware Version < 1.3.2
   Tp-link ≫ Eap772-outdoor Version 1.0
Tp-link ≫ Eap770 Firmware Version < 1.3.2
   Tp-link ≫ Eap770 Version 2.0
Tp-link ≫ Eap723 Firmware Version < 1.3.2
   Tp-link ≫ Eap723 Version 1.0
Tp-link ≫ Eap773 Firmware Version < 1.1.2
   Tp-link ≫ Eap773 Version 1.0
Tp-link ≫ Eap783 Firmware Version < 1.1.2
   Tp-link ≫ Eap783 Version 1.0
Tp-link ≫ Eap772 Firmware Version < 1.1.2
   Tp-link ≫ Eap772 Version 1.0
Tp-link ≫ Eap787 Firmware Version < 1.1.2
   Tp-link ≫ Eap787 Version 1.0
Tp-link ≫ Eap720 Firmware Version < 1.1.2
   Tp-link ≫ Eap720 Version 1.0
Tp-link ≫ Eap723 Firmware Version < 1.1.2
   Tp-link ≫ Eap723 Version 2.0
Tp-link ≫ Eap725-wall Firmware Version < 1.1.2
   Tp-link ≫ Eap725-wall Version 1.0
Tp-link ≫ Eap215 Bridge Kit Firmware Version < 1.1.4
   Tp-link ≫ Eap215 Bridge Kit Version 3.0
Tp-link ≫ Eap211 Bridge Kit Firmware Version < 1.1.4
   Tp-link ≫ Eap211 Bridge Kit Version 3.0
Tp-link ≫ Beam Bridge 5 Ur Firmware Version < 1.1.5
   Tp-link ≫ Beam Bridge 5 Ur Version 1.0
Tp-link ≫ Eap603gp-desktop Firmware Version < 1.1.0
   Tp-link ≫ Eap603gp-desktop Version 1.0
Tp-link ≫ Eap615gp-wall Firmware Version < 1.1.0
   Tp-link ≫ Eap615gp-wall Version 1.0
   Tp-link ≫ Eap615gp-wall Version 1.20
Tp-link ≫ Eap625gp-wall Firmware Version < 1.1.0
   Tp-link ≫ Eap625gp-wall Version 1.0
   Tp-link ≫ Eap625gp-wall Version 1.20
Tp-link ≫ Eap610gp-desktop Firmware Version < 1.1.0
   Tp-link ≫ Eap610gp-desktop Version 1.0
   Tp-link ≫ Eap610gp-desktop Version 1.20
   Tp-link ≫ Eap610gp-desktop Version 1.26
Tp-link ≫ Eap650gp-desktop Firmware Version < 1.0.1
   Tp-link ≫ Eap650gp-desktop Version 1.0
Tp-link ≫ Eap653 Firmware Version < 1.3.3
   Tp-link ≫ Eap653 Version 1.0
Tp-link ≫ Eap650-outdoor Firmware Version < 1.3.3
   Tp-link ≫ Eap650-outdoor Version 1.0
Tp-link ≫ Eap230-wall Firmware Version < 3.3.1
   Tp-link ≫ Eap230-wall Version 1.0
Tp-link ≫ Eap235-wall Firmware Version < 3.3.1
   Tp-link ≫ Eap235-wall Version 1.0
Tp-link ≫ Eap603-outdoor Firmware Version < 1.5.1
   Tp-link ≫ Eap603-outdoor Version 1.0
Tp-link ≫ Eap653 Ur Firmware Version < 1.4.2
   Tp-link ≫ Eap653 Ur Version 1.0
Tp-link ≫ Eap650-desktop Firmware Version < 1.1.0
   Tp-link ≫ Eap650-desktop Version 1.0
Tp-link ≫ Eap615-wall Firmware Version < 1.1.0
   Tp-link ≫ Eap615-wall Version 1.0
Tp-link ≫ Eap100-bridge Kit Firmware Version < 1.0.3
   Tp-link ≫ Eap100-bridge Kit Version 1.0
Tp-link ≫ Er706w-4g Firmware Version < 2.1.0
   Tp-link ≫ Er706w-4g Version 2.0
Tp-link ≫ Omada Controller SwEdition - Version < 6.0.0.34
   Tp-link ≫ Oc200 Version 1
   Tp-link ≫ Oc200 Version 2
   Tp-link ≫ Oc300 Version 1.6
   Tp-link ≫ Oc400 Version 1.6
Tp-link ≫ Omada Controller SwEdition - Version < 5.15.24
   Tp-link ≫ Oc220 Version 1
   Tp-link ≫ Oc220 Version 2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.1
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
f23511db-6c3e-4e32-a477-6aa17d310630 6 0 0
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-760 Use of a One-Way Hash with a Predictable Salt

The product uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the product uses a predictable salt as part of the input.

https://support.omadanetworks.com/us/download/
Product
https://support.omadanetworks.com/us/document/114950/
Vendor Advisory
https://support.omadanetworks.com/en/download/
Product