Veille CVE

Recherche « Tp-link omada s7500-24y4c firmware »

5 CVE

Critique 0 Élevée 1 Moyenne 4 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Tp-link omada s7500-24y4c firmware » ✕
  1. CVE-2025-15631 5.9 Moyenne

    TP-Link Systems Inc. Omada Gateways · TP-Link Systems Inc. Omada Switches · TP Link Systems Inc. Omada Access Points · TP-Link Systems Inc. Omada OLTs

    A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing algorithm that does not provide sufficient protection. An attacker who obtains access to stored credential data may be able to recover valid credentials to gain unauthorized access to affected devices or management environments.

  2. CVE-2025-15630 5.9 Moyenne

    TP-Link Systems Inc. Omada Gateways · TP-Link Systems Inc. Omada Switches · TP Link Systems Inc. Omada Access Points · TP-Link Systems Inc Omada Controllers

    A race condition exists in the cloud-based Omada device adoption process when an attacker may be able to interact with the adoption workflow before a legitimate device completes registration, resulting in provisioning information being delivered to an attacker. Successful exploitation may allow disclosure of provisioning information intended for a legitimate device.

  3. CVE-2025-15629 7.5 Élevée

    TP-Link Systems Inc. Omada Gateways · TP-Link Systems Inc. Omada Switches · TP Link Systems Inc. Omada Access Points · TP-Link Systems Inc Omada Controllers

    A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation. An attacker who successfully intercepts adoption-related communications may be able to recover session encryption keys and decrypt affected communications.

  4. CVE-2025-15544 5.9 Moyenne

    TP-Link Systems Inc. Omada Gateways · TP-Link Systems Inc. Omada Switches · TP Link Systems Inc. Omada Access Points · TP-Link Systems Inc. Omada App

    A cryptographic weakness exists in the Omada device adoption process.  During adoption, authentication credentials associated with site management are transmitted using a weak hashing algorithm that does not provide sufficient protection. An attacker who successfully intercepts adoption-related authentication traffic may be able to recover valid credentials and gain unauthorized access to managed devices or controller-managed environments.

  5. CVE-2025-9291 6.5 Moyenne

    TP-Link Systems Inc. Omada Gateways · TP-Link Systems Inc. Omada Switches · TP-Link Systems Inc. Omada Access Points · Tp-link omada fusion 2.5g firmware

    A certification validation weakness exists in communication between affected Omada devices and cloud controllers. Certificate identity verification does not adequately validate that a presented certificate corresponds to the expected cloud controller hostname, which may allow certificate validation protections to be bypassed under specific conditions. Successful exploitation may allow interception or modification of communication between affected devices and cloud controllers.