Veille CVE
CVE-2025-15631
5.9 MoyenneDescription
A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing algorithm that does not provide sufficient protection. An attacker who obtains access to stored credential data may be able to recover valid credentials to gain unauthorized access to affected devices or management environments.
Produits concernés
- TP-Link Systems Inc. Omada Gateways
- TP-Link Systems Inc. Omada Switches
- TP Link Systems Inc. Omada Access Points
- TP-Link Systems Inc. Omada OLTs
- Tp-link omada fusion 2.5g firmware
- Tp-link omada er707-m2 firmware
- Tp-link omada er7206 firmware
- Tp-link omada er706w firmware
- Tp-link omada er8411 firmware
- Tp-link omada er605 firmware
- Tp-link omada er7412-m2 firmware
- Tp-link omada er706w-4g firmware
- Tp-link omada er703wp-4g-outdoor firmware
- Tp-link omada er706wp-4g firmware
- Tp-link omada s7500-24y4c firmware
- Tp-link omada s7500-26xf6y firmware
- Tp-link omada s6500-48mpp6y firmware
- Tp-link omada s6500-24mpp4y firmware
- Tp-link omada s6500-48gp6xf firmware
- Tp-link omada s6500-48g6xf firmware
- Tp-link omada s6500-24gp4xf firmware
- Tp-link omada s6500-24g4xf firmware
- Tp-link omada sx6632yf firmware
- Tp-link omada sx3032f firmware
- Tp-link omada sx3016f firmware
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 4.0 | 5.7 Moyenne | f23511db-6c3e-4e32-a477-6aa17d310630 | CVSS:4.0/AV:A/AC:H/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| 3.1 | 5.9 Moyenne | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |