Omada Access Point (Eap660 Hd V1.0/V2.0, Eap620 Hd V2.0/V3.0/V3.20, Eap610/Eap610 Outdoor V1.0/V2.0, Eap623 Outdoor Hd V1.0, Eap625 Outdoor Hd V1.0)Eap
Approved changes feed: RSS · Atom
cpe:2.3:a:tp-link_systems_inc.:omada_access_point_(eap660_hd_v1.0/v2.0,_eap620_hd_v2.0/v3.0/v3.20,_eap610/eap610-outdoor_v1.0/v2.0,_eap623-outdoor_hd_v1.0,_eap625-outdoor_hd_v1.0)eap:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Tp Link Systems Inc. (48bb0273-54d9-5a12-8b5a-2521b7aba122) |
|---|---|
| Product | Omada Access Point (Eap660 Hd V1.0/V2.0, Eap620 Hd V2.0/V3.0/V3.20, Eap610/Eap610 Outdoor V1.0/V2.0, Eap623 Outdoor Hd V1.0, Eap625 Outdoor Hd V1.0)Eap (0ede29d3-2bad-572e-90ec-454e43d315ab) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-9290 |
vulnerable | 2026-06-08 07:45:22.090615 |
Authentication Weakness on Omada Controllers, Gateways and Access Points
An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values. Exploitation requires advanced network positioning and allows an attacker to intercept adoption traffic and forge valid authentication through offline precomputation, potentially exposing sensitive information and compromising confidentiality.
Published: 2026-01-22T23:14:45.823Z
Updated: 2026-01-23T20:04:29.976Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.