TP-Link

The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests.

Affected Omada devices rely on embedded certificates that are shared across deployments to establish trust between controllers and managed devices.

A certification validation weakness exists in communication between affected Omada devices and cloud controllers.

A cryptographic weakness exists in the Omada adoption protocol.

A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in sessio…

A cryptographic weakness exists in the Omada device adoption process.

A race condition exists in the cloud-based Omada device adoption process when an attacker may be able to interact with the adoption workflow before a legitimate device completes registration, resulting in provisioning in…

A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing algorithm that does not provide sufficient protection.