Veille CVE
CVE-2025-15628
7.5 ÉlevéeDescription
Affected Omada devices rely on embedded certificates that are shared across deployments to establish trust between controllers and managed devices. An attacker who obtains the embedded certificates may be able to impersonate trusted controllers or devices and intercept affected communications.
Produits concernés
- TP-Link Systems Inc. Omada Gateways
- TP-Link Systems Inc. Omada Switches
- TP Link Systems Inc. Omada Access Points
- TP-Link Systems Inc Omada Controllers
- TP-Link Systems Inc. Omada OLTs
- Tp-link omada oc200 v3 firmware
- Tp-link omada oc300 firmware
- Tp-link omada oc400 firmware
- Tp-link omada fusion 2.5g firmware
- Tp-link omada er707-m2 firmware
- Tp-link omada tl-sg3452x firmware
- Tp-link omada sg3428xmpp firmware
- Tp-link omada sg3428xmp firmware
- Tp-link omada sg3428x firmware
- Tp-link omada sg2005p-pd firmware
- Tp-link omada sg3452p firmware
- Tp-link omada sg3452 firmware
- Tp-link omada sg3428mp firmware
- Tp-link omada sg3428 firmware
- Tp-link omada sg3210 firmware
- Tp-link omada tl-sg3210 firmware
- Tp-link omada sg2452lp firmware
- Tp-link omada sg2428p firmware
- Tp-link omada sg2428lp firmware
- Tp-link omada sg2218p firmware
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 4.0 | 8.2 Élevée | f23511db-6c3e-4e32-a477-6aa17d310630 | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| 3.1 | 7.5 Élevée | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |