GCVE - cpe:2.3:o:tp-link:er605_firmware:2.3.1:-:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:tp-link:er605_firmware:2.3.1:-:*:*:*:*:*:*

part: o version: 2.3.1 update: -

Vendor	Tp Link (`0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e`)
Product	Er605 Firmware (`cc6f2f03-d3c8-5d36-bf75-28167c022945`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-7851`	vulnerable	2026-06-08 07:45:18.392086	Unauthorized root access via debug functionality An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways. Published: 2025-10-21T00:29:05.809Z Updated: 2025-10-24T17:00:06.753Z Open on db.gcve.eu Reference links https://support.omadanetworks.com/en/document/108456/ https://www.omadanetworks.com/us/business-networking/all-omada-router/ https://www.omadanetworks.com/us/business-networking/omada-pro-router-wired-router/ https://www.tp-link.com/us/business-networking/soho-festa-gateway/ https://www.forescout.com/blog/new-tp-link-router-vulnerabilities-a-primer-on-rooting-routers/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-7850`	vulnerable	2026-06-08 07:45:18.366010	Authenticated OS command execution A command injection vulnerability may be exploited after the admin's authentication on the web portal on Omada gateways. Published: 2025-10-21T00:28:11.589Z Updated: 2025-10-24T16:59:25.310Z Open on db.gcve.eu Reference links https://support.omadanetworks.com/en/document/108456/ https://www.omadanetworks.com/us/business-networking/all-omada-router/ https://www.omadanetworks.com/us/business-networking/omada-pro-router-wired-router/ https://www.tp-link.com/us/business-networking/soho-festa-gateway/ https://www.forescout.com/blog/new-tp-link-router-vulnerabilities-a-primer-on-rooting-routers/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6542`	vulnerable	2026-06-08 07:43:15.302703	OS command injection in multiple parameters An arbitrary OS command may be executed on the product by a remote unauthenticated attacker. Published: 2025-10-21T00:23:08.908Z Updated: 2025-10-21T14:15:13.774Z Open on db.gcve.eu Reference links https://support.omadanetworks.com/en/document/108455/ https://www.omadanetworks.com/us/business-networking/all-omada-router/ https://www.omadanetworks.com/us/business-networking/omada-pro-router-wired-router/ https://www.tp-link.com/us/business-networking/soho-festa-gateway/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6541`	vulnerable	2026-06-08 07:43:15.299687	OS command injection using information obtained from the web management interface An arbitrary OS command may be executed on the product by the user who can log in to the web management interface. Published: 2025-10-21T00:21:42.535Z Updated: 2025-10-21T13:57:51.728Z Open on db.gcve.eu Reference links https://support.omadanetworks.com/en/document/108455/ https://www.omadanetworks.com/us/business-networking/all-omada-router/ https://www.omadanetworks.com/us/business-networking/omada-pro-router-wired-router/ https://www.tp-link.com/us/business-networking/soho-festa-gateway/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.