Omada Switches
Approved changes feed: RSS · Atom
cpe:2.3:a:tp-link_systems_inc.:omada_switches:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Tp Link Systems Inc. (48bb0273-54d9-5a12-8b5a-2521b7aba122) |
|---|---|
| Product | Omada Switches (d58123e6-8d9d-51f4-bf66-06497f9a4181) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-15627 |
vulnerable | 2026-09-16 04:27:18.612420 |
Hardcoded Cryptographic Keys in TP-Link Omada Adoption Protocol Authentication
A cryptographic
weakness exists in the Omada adoption protocol.
The protocol relies on hard-coded cryptographic keys to establish trust and
protect authentication exchanges between controllers and managed devices during
device adoption.
An attacker may
be able to impersonate trusted controllers or managed devices and gain access
to sensitive adoption-related communications.
Published: 2026-08-03T17:49:46.749Z
Updated: 2026-08-03T18:33:55.632Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15631 |
vulnerable | 2026-09-16 04:27:18.246232 |
Weak Credential Storage in TP-Link Omada Devices
A
cryptographic weakness exists in affected Omada devices where site credentials
are protected using a legacy hashing algorithm that does not provide sufficient
protection.
An attacker
who obtains access to stored credential data may be able to recover valid credentials
to gain unauthorized access to affected devices or management environments.
Published: 2026-08-03T17:51:52.265Z
Updated: 2026-08-03T18:29:33.225Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15629 |
vulnerable | 2026-09-16 04:27:18.228679 |
Weak Session Key Generation in TP-Link Omada Adoption Protocol
A cryptographic
weakness exists in the Omada adoption protocol where session encryption keys
used to protect communications between controllers and managed devices may be
predictable due to insufficient entropy in session key generation.
An attacker
who successfully intercepts adoption-related communications may be able to recover
session encryption keys and decrypt affected communications.
Published: 2026-08-03T17:50:44.038Z
Updated: 2026-08-03T18:32:11.317Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15544 |
vulnerable | 2026-09-16 04:27:18.116232 |
Weak Credential Protection During TP-Link Omada Device Adoption
A cryptographic
weakness exists in the Omada device adoption process. During adoption, authentication credentials associated
with site management are transmitted using a weak hashing algorithm that does
not provide sufficient protection.
An attacker who
successfully intercepts adoption-related authentication traffic may be able to
recover valid credentials and gain unauthorized access to managed devices or
controller-managed environments.
Published: 2026-08-03T17:49:13.357Z
Updated: 2026-08-03T18:35:36.905Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15630 |
vulnerable | 2026-09-16 04:27:18.102400 |
Device Provisioning Race Condition in TP-Link Omada Adoption Workflow
A race
condition exists in the cloud-based Omada device adoption process when an
attacker may be able to interact with the adoption workflow before a legitimate
device completes registration, resulting in provisioning information being
delivered to an attacker.
Successful
exploitation may allow disclosure of provisioning information intended for a
legitimate device.
Published: 2026-08-03T17:51:06.542Z
Updated: 2026-08-03T18:30:42.253Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15628 |
vulnerable | 2026-09-16 04:27:18.055199 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9291 |
vulnerable | 2026-09-16 04:27:16.989643 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.