OG
Product
Omada gateways
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 4Low 0
Watch
Add Omada gateways to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-7851 | 9.8 | Oct 21 | Unauthorized root access via debug functionality Affected: before ER8411 1.3.3, ER7412-M2 1.1.0, ER707-M2 1.3.1, ER7206 2.2.2, ER605 2.3.1, ER706W 1.2.1, ER706W-4G 1.2.1, ER7212PC 2.1.3 |
| CVE-2025-6542 | 9.8 | Oct 21 | OS command injection in multiple parameters Affected: before ER8411 1.3.3, ER7412-M2 1.1.0, ER707-M2 1.3.1, ER7206 2.2.2, ER605 2.3.1, ER706W 1.2.1, ER706W-4G 1.2.1, ER7212PC 2.1.3 |
| CVE-2025-6541 | 8.8 | Oct 21 | OS command injection using information obtained from the web management interface Affected: before ER8411 1.3.3, ER7412-M2 1.1.0, ER707-M2 1.3.1, ER7206 2.2.2, ER605 2.3.1, ER706W 1.2.1, ER706W-4G 1.2.1, ER7212PC 2.1.3 |
| CVE-2025-15629 | 7.5 | Aug 3 | Weak Session Key Generation in TP-Link Omada Adoption Protocol Affected: 0 |
| CVE-2025-15628 | 7.5 | Aug 3 | Hardcoded Certificates in TP-Link Omada Device Communications Affected: 0 |
| CVE-2025-15627 | 7.5 | Aug 3 | Hardcoded Cryptographic Keys in TP-Link Omada Adoption Protocol Authentication Affected: 0 |
| CVE-2025-7850 | 7.2 | Oct 21 | Authenticated OS command execution Affected: before ER8411 1.3.3, ER7412-M2 1.1.0, ER707-M2 1.3.1, ER7206 2.2.2, ER605 2.3.1, ER706W 1.2.1, ER706W-4G 1.2.1, ER7212PC 2.1.3 |
| CVE-2025-9291 | 6.5 | Aug 3 | Improper Certificate Validation in TP-Link Omada Cloud Communications Affected: 0 |
| CVE-2025-15631 | 5.9 | Aug 3 | Weak Credential Storage in TP-Link Omada Devices Affected: 0 |
| CVE-2025-15630 | 5.9 | Aug 3 | Device Provisioning Race Condition in TP-Link Omada Adoption Workflow Affected: 0 |
| CVE-2025-15544 | 5.9 | Aug 3 | Weak Credential Protection During TP-Link Omada Device Adoption Affected: 0 |
Showing 11