9.8
CVE-2026-1668
- EPSS 0.97%
- Veröffentlicht 13.03.2026 16:53:23
- Zuletzt bearbeitet 02.04.2026 15:03:02
- Erkennungen
LoginInput Validation Vulnerability on Multiple Omada Switches
The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests. Under specific conditions, this flaw may result in unintended command execution.<br>An unauthenticated attacker with network access to the affected interface may cause memory corruption, service instability, or information disclosure. Successful exploitation may allow remote code execution or denial-of-service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tp-link ≫ Omada Sg2005p-pd Firmware Version >= 1.0.0 < 1.0.19
Tp-link ≫ Omada Sg2008 Firmware Version >= 4.20.0 < 4.20.17
Tp-link ≫ Omada Sg2008 Firmware Version >= 4.30.0 < 4.30.1
Tp-link ≫ Omada Sg2008p Firmware Version >= 3.20.0 < 3.20.17
Tp-link ≫ Omada Sg2008p Firmware Version >= 3.30.0 < 3.30.1
Tp-link ≫ Omada Sg2016p Firmware Version >= 1.20.0 < 1.20.17
Tp-link ≫ Omada Sg2016p Firmware Version >= 1.30.0 < 1.30.1
Tp-link ≫ Omada Sg2210mp Firmware Version >= 4.20.0 < 4.20.18
Tp-link ≫ Omada Sg2210mp Firmware Version >= 5.0.0 < 5.0.15
Tp-link ≫ Omada Sg2210mp Firmware Version >= 5.20.0 < 5.20.1
Tp-link ≫ Omada Sg2210p Firmware Version >= 5.20.0 < 5.20.18
Tp-link ≫ Omada Sg2210p Firmware Version >= 5.30.0 < 5.30.1
Tp-link ≫ Omada Sg2210xmp-m2 Firmware Version >= 1.0.0 < 1.0.19
Tp-link ≫ Omada Sg2218 Firmware Version >= 1.20.0 < 1.20.17
Tp-link ≫ Omada Sg2218 Firmware Version >= 1.30.0 < 1.30.1
Tp-link ≫ Omada Sg2218p Firmware Version >= 1.20.0 < 1.20.17
Tp-link ≫ Omada Sg2218p Firmware Version >= 2.0.0 < 2.0.14
Tp-link ≫ Omada Sg2218p Firmware Version >= 2.20.0 < 2.20.2
Tp-link ≫ Omada Sg2428lp Firmware Version >= 1.0.0 < 1.0.13
Tp-link ≫ Omada Sg2428p Firmware Version >= 5.20.0 < 5.20.20
Tp-link ≫ Omada Sg2428p Firmware Version >= 5.30.0 < 5.30.16
Tp-link ≫ Omada Sg2452lp Firmware Version >= 1.0.0 < 1.0.13
Tp-link ≫ Omada Sg3210 Firmware Version >= 3.20.0 < 3.20.17
Tp-link ≫ Omada Sg3210 Firmware Version >= 3.30.0 < 3.30.1
Tp-link ≫ Omada Sg3210xhp-m2 Firmware Version >= 3.0.0 < 3.0.21
Tp-link ≫ Omada Sg3210x-m2 Firmware Version >= 1.20.0 < 1.20.1
Tp-link ≫ Omada Sg3218xp-m2 Firmware Version >= 1.0.0 < 1.0.19
Tp-link ≫ Omada Sg3428 Firmware Version >= 2.30.0 < 2.30.16
Tp-link ≫ Omada Sg3428 Firmware Version >= 2.40.0 < 2.40.1
Tp-link ≫ Omada Sg3428mp Firmware Version >= 6.20.0 < 6.20.20
Tp-link ≫ Omada Sg3428mp Firmware Version >= 6.30.0 < 6.30.1
Tp-link ≫ Omada Sg3428x Firmware Version >= 1.30.0 < 1.30.17
Tp-link ≫ Omada Sg3428x Firmware Version >= 1.40.0 < 1.40.1
Tp-link ≫ Omada Sg3428xf Firmware Version >= 1.20.0 < 1.20.16
Tp-link ≫ Omada Sg3428xf Firmware Version >= 1.30.0 < 1.30.1
Tp-link ≫ Omada Sg3428x-m2 Firmware Version >= 1.20.0 < 1.20.18
Tp-link ≫ Omada Sg3428xmp Firmware Version >= 3.20.0 < 3.20.21
Tp-link ≫ Omada Sg3428xmp Firmware Version >= 3.30.0 < 3.30.1
Tp-link ≫ Omada Sg3428xmpp Firmware Version >= 1.0.0 < 1.0.16
Tp-link ≫ Omada Sg3428xmpp Firmware Version >= 1.20.0 < 1.20.1
Tp-link ≫ Omada Sg3428xpp-m2 Firmware Version >= 1.20.0 < 1.20.19
Tp-link ≫ Omada Sg3452 Firmware Version >= 1.20.0 < 1.20.17
Tp-link ≫ Omada Sg3452 Firmware Version >= 1.30.0 < 1.30.1
Tp-link ≫ Omada Sg3452p Firmware Version >= 3.30.0 < 3.30.17
Tp-link ≫ Omada Sg3452p Firmware Version >= 3.40.0 < 3.40.1
Tp-link ≫ Omada Sg3452x Firmware Version >= 1.20.0 < 1.20.18
Tp-link ≫ Omada Sg3452x Firmware Version >= 1.30.0 < 1.30.1
Tp-link ≫ Omada Sg3452xmpp Firmware Version >= 1.0.0 < 1.0.15
Tp-link ≫ Omada Sg3452xp Firmware Version >= 2.20.0 < 2.20.20
Tp-link ≫ Omada Sg3452xp Firmware Version >= 2.30.0 < 2.30.1
Tp-link ≫ Omada Sl2428p Firmware Version >= 6.20.0 < 6.20.18
Tp-link ≫ Omada Sx3008f Firmware Version >= 1.20.0 < 1.20.12
Tp-link ≫ Omada Sx3016f Firmware Version >= 1.20.0 < 1.20.16
Tp-link ≫ Omada Sx3016f Firmware Version >= 1.30.0 < 1.30.1
Tp-link ≫ Omada Sx3032f Firmware Version >= 1.0.0 < 1.0.15
Tp-link ≫ Omada Sx3206hpp Firmware Version >= 1.20.0 < 1.20.12
Tp-link ≫ Omada Sx3832 Firmware Version >= 1.0.0 < 1.0.12
Tp-link ≫ Omada Sx3832mpp Firmware Version >= 1.0.0 < 1.0.11
Tp-link ≫ Omada Tl-sg2428p Firmware Version >= 4.0.0 < 4.0.26
Tp-link ≫ Omada Tl-sg3428mp Firmware Version >= 5.0.0 < 5.0.25
Tp-link ≫ Omada Tl-sg3452p Firmware Version >= 3.0.0 < 3.0.22
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.97% | 0.572 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| f23511db-6c3e-4e32-a477-6aa17d310630 | 7.7 | 0 | 0 |
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
CWE-787 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
https://support.omadanetworks.com/us/product/
https://support.omadanetworks.com/au/download/firmware/
https://support.omadanetworks.com/en/download/firmware/
https://support.omadanetworks.com/us/document/118794/