Veille CVE
CVE-2025-15627
7.5 ÉlevéeDescription
A cryptographic weakness exists in the Omada adoption protocol. The protocol relies on hard-coded cryptographic keys to establish trust and protect authentication exchanges between controllers and managed devices during device adoption. An attacker may be able to impersonate trusted controllers or managed devices and gain access to sensitive adoption-related communications.
Produits concernés
- TP-Link Systems Inc. Omada Gateways
- TP-Link Systems Inc. Omada Switches
- TP Link Systems Inc. Omada Access Points
- TP-Link Systems Inc Omada Controllers
- Tp-link omada oc200 v3 firmware
- Tp-link omada oc300 firmware
- Tp-link omada oc400 firmware
- Tp-link omada fusion 2.5g firmware
- Tp-link omada er707-m2 firmware
- Tp-link omada tl-sg3452x firmware
- Tp-link omada sg3428xmpp firmware
- Tp-link omada sg3428xmp firmware
- Tp-link omada sg3428x firmware
- Tp-link omada sg2005p-pd firmware
- Tp-link omada sg3452p firmware
- Tp-link omada sg3452 firmware
- Tp-link omada sg3428mp firmware
- Tp-link omada sg3428 firmware
- Tp-link omada sg3210 firmware
- Tp-link omada tl-sg3210 firmware
- Tp-link omada sg2452lp firmware
- Tp-link omada sg2428p firmware
- Tp-link omada sg2428lp firmware
- Tp-link omada sg2218p firmware
- Tp-link omada sg2218 firmware
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 4.0 | 6.9 Moyenne | f23511db-6c3e-4e32-a477-6aa17d310630 | CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| 3.1 | 7.5 Élevée | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |