Fiche vulnérabilité
CVE-2025-15629 : faille élevée tp-link omada oc200 v3 firmware (CVSS 7.5)
Description
A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation. An attacker who successfully intercepts adoption-related communications may be able to recover session encryption keys and decrypt affected communications.
En bref
- Sévérité
- Élevée (CVSS 7.5)
- Vecteur CVSS
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Exploitation active
- Non signalée par la CISA
- Publication
- 3 août 2026
- Dernière mise à jour
- 7 août 2026
Produits concernés
- tp-link omada oc200 v3 firmware
- tp-link omada oc300 firmware
- tp-link omada oc400 firmware
- tp-link omada fusion 2.5g firmware
- tp-link omada er707-m2 firmware
- tp-link omada er7206 firmware
- tp-link omada er706w firmware
- tp-link omada er8411 firmware
- tp-link omada er605 firmware
- tp-link omada er7412-m2 firmware
- tp-link omada er706w-4g firmware
- tp-link omada er703wp-4g-outdoor firmware
- tp-link omada er706wp-4g firmware
- tp-link omada s7500-24y4c firmware
- tp-link omada s7500-26xf6y firmware
- tp-link omada s6500-48mpp6y firmware
- tp-link omada s6500-24mpp4y firmware
- tp-link omada s6500-48gp6xf firmware
- tp-link omada s6500-48g6xf firmware
- tp-link omada s6500-24gp4xf firmware