Veille CVE
CVE-2025-15629
7.5 ÉlevéeDescription
A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation. An attacker who successfully intercepts adoption-related communications may be able to recover session encryption keys and decrypt affected communications.
Produits concernés
- TP-Link Systems Inc. Omada Gateways
- TP-Link Systems Inc. Omada Switches
- TP Link Systems Inc. Omada Access Points
- TP-Link Systems Inc Omada Controllers
- Tp-link omada oc200 v3 firmware
- Tp-link omada oc300 firmware
- Tp-link omada oc400 firmware
- Tp-link omada fusion 2.5g firmware
- Tp-link omada er707-m2 firmware
- Tp-link omada er7206 firmware
- Tp-link omada er706w firmware
- Tp-link omada er8411 firmware
- Tp-link omada er605 firmware
- Tp-link omada er7412-m2 firmware
- Tp-link omada er706w-4g firmware
- Tp-link omada er703wp-4g-outdoor firmware
- Tp-link omada er706wp-4g firmware
- Tp-link omada s7500-24y4c firmware
- Tp-link omada s7500-26xf6y firmware
- Tp-link omada s6500-48mpp6y firmware
- Tp-link omada s6500-24mpp4y firmware
- Tp-link omada s6500-48gp6xf firmware
- Tp-link omada s6500-48g6xf firmware
- Tp-link omada s6500-24gp4xf firmware
- Tp-link omada s6500-24g4xf firmware
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 4.0 | 6.9 Moyenne | f23511db-6c3e-4e32-a477-6aa17d310630 | CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| 3.1 | 7.5 Élevée | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |