Approved changes feed: RSS · Atom

cpe:2.3:a:tp-link_systems_inc.:omada_olts:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTp Link Systems Inc. (48bb0273-54d9-5a12-8b5a-2521b7aba122)
ProductOmada Olts (32fde179-eaaa-569f-877c-19e1e091f784)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-15631 vulnerable 2026-09-16 04:27:18.247656 Weak Credential Storage in TP-Link Omada Devices
A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing algorithm that does not provide sufficient protection. An attacker who obtains access to stored credential data may be able to recover valid credentials to gain unauthorized access to affected devices or management environments.
Published: 2026-08-03T17:51:52.265Z
Updated: 2026-08-03T18:29:33.225Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15628 vulnerable 2026-09-16 04:27:18.062143 Hardcoded Certificates in TP-Link Omada Device Communications
Affected Omada devices rely on embedded certificates that are shared across deployments to establish trust between controllers and managed devices. An attacker who obtains the embedded certificates may be able to impersonate trusted controllers or devices and intercept affected communications.
Published: 2026-08-03T17:50:12.974Z
Updated: 2026-08-03T18:33:03.658Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.