Er707 M2 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:tp-link:er707-m2_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Tp Link (0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e) |
|---|---|
| Product | Er707 M2 Firmware (9c43408d-a1cf-5afa-91a9-ee9c4ff0c1cd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-9290 |
vulnerable | 2026-06-08 07:45:22.105762 |
Authentication Weakness on Omada Controllers, Gateways and Access Points
An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values. Exploitation requires advanced network positioning and allows an attacker to intercept adoption traffic and forge valid authentication through offline precomputation, potentially exposing sensitive information and compromising confidentiality.
Published: 2026-01-22T23:14:45.823Z
Updated: 2026-01-23T20:04:29.976Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7851 |
vulnerable | 2026-06-08 07:45:18.392615 |
Unauthorized root access via debug functionality
An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways.
Published: 2025-10-21T00:29:05.809Z
Updated: 2025-10-24T17:00:06.753Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7850 |
vulnerable | 2026-06-08 07:45:18.360649 |
Authenticated OS command execution
A command injection vulnerability may be exploited after the admin's authentication on the web portal on Omada gateways.
Published: 2025-10-21T00:28:11.589Z
Updated: 2025-10-24T16:59:25.310Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6542 |
vulnerable | 2026-06-08 07:43:15.301994 |
OS command injection in multiple parameters
An arbitrary OS command may be executed on the product by a remote unauthenticated attacker.
Published: 2025-10-21T00:23:08.908Z
Updated: 2025-10-21T14:15:13.774Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6541 |
vulnerable | 2026-06-08 07:43:15.293682 |
OS command injection using information obtained from the web management interface
An arbitrary OS command may be executed on the product by the user who can log in to the web management interface.
Published: 2025-10-21T00:21:42.535Z
Updated: 2025-10-21T13:57:51.728Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.