Read the docs
TI-2025-08515 Aliases CVE-2025-9290GHSA-gwgw-6q3h-28pg

Authentication Weakness on Omada Controllers, Gateways and Access Points

Priority LOW 26CWE-760Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
None
Attack complexity
High
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values. Exploitation requires advanced network positioning and allows an attacker to intercept adoption traffic and forge valid authentication through offline precomputation, potentially exposing sensitive information and compromising confidentiality.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00222 12th percentileScored 2026-11-07
Fix Fixed Omada Software Controller (TP-Link Systems Inc.): 6.0.0.24Omada Cloud Controller (TP-Link Systems Inc.): 6.0.0.100+28 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
TP-LinkOmada Software Controllerbefore 6.0.0.246.0.0.24Patch availableCNA
TP-LinkOmada Cloud Controllerbefore 6.0.0.1006.0.0.100Patch availableCNA
TP-LinkOmada Hardware Controller (OC200, OC300, OC400)before 6.0.0.346.0.0.34Patch availableCNA
TP-LinkOmada Hardware Controller OC220before 5.15.245.15.24Patch availableCNA
TP-LinkOmada Gateway (ER605 v2.0)before 2.3.2 Build 20251029 Rel.127272.3.2 Build 20251029 Rel.12727Patch availableCNA
TP-LinkOmada Gateway (ER7206 v2.0)before 2.2.2 Build 20250724 Rel.111092.2.2 Build 20250724 Rel.11109Patch availableCNA
TP-LinkOmada Gateway (ER7406, ER706W, ER706-4G)before 1.2.x1.2.xPatch availableCNA
TP-LinkOmada Gateway (ER707-M2, ER-8411)before 1.3.x1.3.xPatch availableCNA
TP-LinkOmada Gateway (ER7412-M2, ER706WP-4G, ER703WP-4G-Outdoor, DR3220v-4G, DR3650v, DR3650v-4G)before 1.1.01.1.0Patch availableCNA
TP-LinkOmada Gateway (ER8411)before 1.3.5 Build 20251028 Rel.068111.3.5 Build 20251028 Rel.06811Patch availableCNA
TP-LinkOmada Gateway (ER706W-4G 2.0)before 2.1.0 Build 20250810 Rel.770202.1.0 Build 20250810 Rel.77020Patch availableCNA
TP-LinkOmada Gateway (ER701-5G-Outdoor)before 1.0.0 Build 20250826 Rel.688621.0.0 Build 20250826 Rel.68862Patch availableCNA
TP-LinkOmada Gateway (ER605W 2.0)before 2.0.2 Build 20250723 Rel.390482.0.2 Build 20250723 Rel.39048Patch availableCNA
TP-LinkOmada Gateway ER7212PC 2.0before 2.2.1 Build 20251027 Rel.751292.2.1 Build 20251027 Rel.75129Patch availableCNA
TP-LinkOmada Festa Gateway FR365before 1.1.10 Build 20250626 Rel.817461.1.10 Build 20250626 Rel.81746Patch availableCNA
TP-LinkOmada Gateway G36W-4Gbefore 1.1.5 Build 20250710 Rel.621421.1.5 Build 20250710 Rel.62142Patch availableCNA
TP-LinkOmada Access Point (EAP660 HD v1.0/v2.0, EAP620 HD v2.0/v3.0/v3.20, EAP610/EAP610-Outdoor v1.0/v2.0, EAP623-Outdoor HD v1.0, EAP625-Outdoor HD v1.0)EAPbefore 1.6.11.6.1Patch availableCNA
TP-LinkOmada Access Point (EAP655-Wall v1.0)before 1.6.2 Build 20251107 Rel.357001.6.2 Build 20251107 Rel.35700Patch availableCNA
TP-LinkOmada Access Point (EAP772 v1.0, EAP773 v1.0, EAP783 v1.0, EAP787 v1.0, EAP720 v1.0, EAP725-Wall v1.0, EAp723 v2.0)before 1.1.21.1.2Patch availableCNA
TP-LinkOmada Access Point (EAP723 v1.0, EAP772 v2.0, EAP772-Outdoor v 1.0, EAP770 v2.0)before 1.3.2 Build 20250901 Rel.522551.3.2 Build 20250901 Rel.52255Patch availableCNA
TP-LinkOmada Access Point (EAP215 Bridge KIT 3.0, EAP211 Bridge KIT 3.0)before 1.1.4 Build 20251112 Rel.347691.1.4 Build 20251112 Rel.34769Patch availableCNA
TP-LinkOmada Beam Bridge 5 UR v1.0before 1.1.5 Build 20250928 Rel.684991.1.5 Build 20250928 Rel.68499Patch availableCNA
TP-LinkOmada Access Point (EAP603GP-Desktop, EAP615GP-Wall 1.20, EAP625GP-Wall 1.0/1.20, EAP610GP-Desktop 1.0/1.20/1.26), EAP650-Desktop v1.0)before 1.1.01.1.0Patch availableCNA
TP-LinkOmada Access Point (EAP650GP-Desktop 1.0)before 1.0.1 Build 20250819 Rel.602981.0.1 Build 20250819 Rel.60298Patch availableCNA
TP-LinkOmada Access Point (EAP653 v1.0, EAP650-Outdoor v1.0)before 1.3.3 Build 20251111 Rel.726271.3.3 Build 20251111 Rel.72627Patch availableCNA
TP-LinkOmada Access Point (EAP230-Wall v1.0, EAP235-Wall v1.0)before 3.3.1 Build 20251203 Rel.581353.3.1 Build 20251203 Rel.58135Patch availableCNA
TP-LinkOmada Access Point (EAP603-Outdoor v1.0, EAP615-Wall v1.0/v1.20)before 1.5.11.5.1Patch availableCNA
TP-LinkOmada Access Point (EAP653 UR v1.0)before 1.4.2 Build 20251208 Rel.438301.4.2 Build 20251208 Rel.43830Patch availableCNA
TP-LinkOmada Access Point (EAP615-Wall v1.0/v1.20)before 1.5.10 Build 20250903 Rel.497841.5.10 Build 20250903 Rel.49784Patch availableCNA
TP-LinkOmada EAP100-Bridge KIT v1.0before 1.0.3 Build 20251015 Rel.620581.0.3 Build 20251015 Rel.62058Patch availableCNA
  • Omada Software Controller VendorTP-Link Affected before 6.0.0.24 Fixed in 6.0.0.24 Patch available CNA
  • Omada Cloud Controller VendorTP-Link Affected before 6.0.0.100 Fixed in 6.0.0.100 Patch available CNA
  • Omada Hardware Controller (OC200, OC300, OC400) VendorTP-Link Affected before 6.0.0.34 Fixed in 6.0.0.34 Patch available CNA
  • Omada Hardware Controller OC220 VendorTP-Link Affected before 5.15.24 Fixed in 5.15.24 Patch available CNA
  • Omada Gateway (ER605 v2.0) VendorTP-Link Affected before 2.3.2 Build 20251029 Rel.12727 Fixed in 2.3.2 Build 20251029 Rel.12727 Patch available CNA
  • Omada Gateway (ER7206 v2.0) VendorTP-Link Affected before 2.2.2 Build 20250724 Rel.11109 Fixed in 2.2.2 Build 20250724 Rel.11109 Patch available CNA
  • Omada Gateway (ER7406, ER706W, ER706-4G) VendorTP-Link Affected before 1.2.x Fixed in 1.2.x Patch available CNA
  • Omada Gateway (ER707-M2, ER-8411) VendorTP-Link Affected before 1.3.x Fixed in 1.3.x Patch available CNA
  • Omada Gateway (ER7412-M2, ER706WP-4G, ER703WP-4G-Outdoor, DR3220v-4G, DR3650v, DR3650v-4G) VendorTP-Link Affected before 1.1.0 Fixed in 1.1.0 Patch available CNA
  • Omada Gateway (ER8411) VendorTP-Link Affected before 1.3.5 Build 20251028 Rel.06811 Fixed in 1.3.5 Build 20251028 Rel.06811 Patch available CNA
  • Omada Gateway (ER706W-4G 2.0) VendorTP-Link Affected before 2.1.0 Build 20250810 Rel.77020 Fixed in 2.1.0 Build 20250810 Rel.77020 Patch available CNA
  • Omada Gateway (ER701-5G-Outdoor) VendorTP-Link Affected before 1.0.0 Build 20250826 Rel.68862 Fixed in 1.0.0 Build 20250826 Rel.68862 Patch available CNA
  • Omada Gateway (ER605W 2.0) VendorTP-Link Affected before 2.0.2 Build 20250723 Rel.39048 Fixed in 2.0.2 Build 20250723 Rel.39048 Patch available CNA
  • Omada Gateway ER7212PC 2.0 VendorTP-Link Affected before 2.2.1 Build 20251027 Rel.75129 Fixed in 2.2.1 Build 20251027 Rel.75129 Patch available CNA
  • Omada Festa Gateway FR365 VendorTP-Link Affected before 1.1.10 Build 20250626 Rel.81746 Fixed in 1.1.10 Build 20250626 Rel.81746 Patch available CNA
  • Omada Gateway G36W-4G VendorTP-Link Affected before 1.1.5 Build 20250710 Rel.62142 Fixed in 1.1.5 Build 20250710 Rel.62142 Patch available CNA
  • Omada Access Point (EAP660 HD v1.0/v2.0, EAP620 HD v2.0/v3.0/v3.20, EAP610/EAP610-Outdoor v1.0/v2.0, EAP623-Outdoor HD v1.0, EAP625-Outdoor HD v1.0)EAP VendorTP-Link Affected before 1.6.1 Fixed in 1.6.1 Patch available CNA
  • Omada Access Point (EAP655-Wall v1.0) VendorTP-Link Affected before 1.6.2 Build 20251107 Rel.35700 Fixed in 1.6.2 Build 20251107 Rel.35700 Patch available CNA
  • Omada Access Point (EAP772 v1.0, EAP773 v1.0, EAP783 v1.0, EAP787 v1.0, EAP720 v1.0, EAP725-Wall v1.0, EAp723 v2.0) VendorTP-Link Affected before 1.1.2 Fixed in 1.1.2 Patch available CNA
  • Omada Access Point (EAP723 v1.0, EAP772 v2.0, EAP772-Outdoor v 1.0, EAP770 v2.0) VendorTP-Link Affected before 1.3.2 Build 20250901 Rel.52255 Fixed in 1.3.2 Build 20250901 Rel.52255 Patch available CNA
  • Omada Access Point (EAP215 Bridge KIT 3.0, EAP211 Bridge KIT 3.0) VendorTP-Link Affected before 1.1.4 Build 20251112 Rel.34769 Fixed in 1.1.4 Build 20251112 Rel.34769 Patch available CNA
  • Omada Beam Bridge 5 UR v1.0 VendorTP-Link Affected before 1.1.5 Build 20250928 Rel.68499 Fixed in 1.1.5 Build 20250928 Rel.68499 Patch available CNA
  • Omada Access Point (EAP603GP-Desktop, EAP615GP-Wall 1.20, EAP625GP-Wall 1.0/1.20, EAP610GP-Desktop 1.0/1.20/1.26), EAP650-Desktop v1.0) VendorTP-Link Affected before 1.1.0 Fixed in 1.1.0 Patch available CNA
  • Omada Access Point (EAP650GP-Desktop 1.0) VendorTP-Link Affected before 1.0.1 Build 20250819 Rel.60298 Fixed in 1.0.1 Build 20250819 Rel.60298 Patch available CNA
  • Omada Access Point (EAP653 v1.0, EAP650-Outdoor v1.0) VendorTP-Link Affected before 1.3.3 Build 20251111 Rel.72627 Fixed in 1.3.3 Build 20251111 Rel.72627 Patch available CNA
  • Omada Access Point (EAP230-Wall v1.0, EAP235-Wall v1.0) VendorTP-Link Affected before 3.3.1 Build 20251203 Rel.58135 Fixed in 3.3.1 Build 20251203 Rel.58135 Patch available CNA
  • Omada Access Point (EAP603-Outdoor v1.0, EAP615-Wall v1.0/v1.20) VendorTP-Link Affected before 1.5.1 Fixed in 1.5.1 Patch available CNA
  • Omada Access Point (EAP653 UR v1.0) VendorTP-Link Affected before 1.4.2 Build 20251208 Rel.43830 Fixed in 1.4.2 Build 20251208 Rel.43830 Patch available CNA
  • Omada Access Point (EAP615-Wall v1.0/v1.20) VendorTP-Link Affected before 1.5.10 Build 20250903 Rel.49784 Fixed in 1.5.10 Build 20250903 Rel.49784 Patch available CNA
  • Omada EAP100-Bridge KIT v1.0 VendorTP-Link Affected before 1.0.3 Build 20251015 Rel.62058 Fixed in 1.0.3 Build 20251015 Rel.62058 Patch available CNA

CPE configurations NVD · 131

CPEVersionsRoleVendor
cpe:2.3:a:tp-link:omada_controller:*:*:*:*:-:*:*:*before 6.0.0.24VulnerableTP-Link
cpe:2.3:a:tp-link:omada_controller:*:*:*:*:cloud:*:*:*before 6.0.0.100VulnerableTP-Link
cpe:2.3:o:tp-link:oc200_firmware:*:*:*:*:*:*:*:*before 1.37.9VulnerableTP-Link
cpe:2.3:h:tp-link:oc200:1:*:*:*:*:*:*:*1Running onTP-Link
cpe:2.3:o:tp-link:oc220_firmware:*:*:*:*:*:*:*:*before 1.1.3VulnerableTP-Link
cpe:2.3:h:tp-link:oc220:1:*:*:*:*:*:*:*1Running onTP-Link
cpe:2.3:o:tp-link:oc300_firmware:*:*:*:*:*:*:*:*before 1.31.9VulnerableTP-Link
cpe:2.3:h:tp-link:oc300:1.6:*:*:*:*:*:*:*1.6Running onTP-Link
cpe:2.3:o:tp-link:oc400_firmware:*:*:*:*:*:*:*:*before 1.9.9VulnerableTP-Link
cpe:2.3:h:tp-link:oc400:1.6:*:*:*:*:*:*:*1.6Running onTP-Link
  • cpe:2.3:a:tp-link:omada_controller:*:*:*:*:-:*:*:* Versions before 6.0.0.24 Vulnerable ·TP-Link
  • cpe:2.3:a:tp-link:omada_controller:*:*:*:*:cloud:*:*:* Versions before 6.0.0.100 Vulnerable ·TP-Link
  • cpe:2.3:o:tp-link:oc200_firmware:*:*:*:*:*:*:*:* Versions before 1.37.9 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:oc200:1:*:*:*:*:*:*:* Versions 1 Running on ·TP-Link
  • cpe:2.3:o:tp-link:oc220_firmware:*:*:*:*:*:*:*:* Versions before 1.1.3 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:oc220:1:*:*:*:*:*:*:* Versions 1 Running on ·TP-Link
  • cpe:2.3:o:tp-link:oc300_firmware:*:*:*:*:*:*:*:* Versions before 1.31.9 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:oc300:1.6:*:*:*:*:*:*:* Versions 1.6 Running on ·TP-Link
  • cpe:2.3:o:tp-link:oc400_firmware:*:*:*:*:*:*:*:* Versions before 1.9.9 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:oc400:1.6:*:*:*:*:*:*:* Versions 1.6 Running on ·TP-Link
Show 121 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:tp-link:oc200_firmware:*:*:*:*:*:*:*:*before 2.22.9VulnerableTP-Link
cpe:2.3:h:tp-link:oc200:2:*:*:*:*:*:*:*2Running onTP-Link
cpe:2.3:o:tp-link:oc220_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:oc220:2:*:*:*:*:*:*:*2Running onTP-Link
cpe:2.3:o:tp-link:er605_firmware:*:*:*:*:*:*:*:*before 2.3.2VulnerableTP-Link
cpe:2.3:h:tp-link:er605:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:o:tp-link:er7206_firmware:*:*:*:*:*:*:*:*before 2.2.2VulnerableTP-Link
cpe:2.3:h:tp-link:er7206:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:o:tp-link:er7406_firmware:*:*:*:*:*:*:*:*before 1.2.2VulnerableTP-Link
cpe:2.3:h:tp-link:er7406:-:*:*:*:*:*:*:*not specified by NVDRunning onTP-Link
cpe:2.3:o:tp-link:er707-m2_firmware:*:*:*:*:*:*:*:*before 1.3.1VulnerableTP-Link
cpe:2.3:h:tp-link:er707-m2:-:*:*:*:*:*:*:*not specified by NVDRunning onTP-Link
cpe:2.3:o:tp-link:er7412-m2_firmware:*:*:*:*:*:*:*:*before 1.1.0VulnerableTP-Link
cpe:2.3:h:tp-link:er7412-m2:-:*:*:*:*:*:*:*not specified by NVDRunning onTP-Link
cpe:2.3:o:tp-link:er8411_firmware:*:*:*:*:*:*:*:*before 1.3.5VulnerableTP-Link
cpe:2.3:h:tp-link:er8411:-:*:*:*:*:*:*:*not specified by NVDRunning onTP-Link
cpe:2.3:o:tp-link:er706w_firmware:*:*:*:*:*:*:*:*before 1.2.1VulnerableTP-Link
cpe:2.3:h:tp-link:er706w:-:*:*:*:*:*:*:*not specified by NVDRunning onTP-Link
cpe:2.3:o:tp-link:er706w-4g_firmware:*:*:*:*:*:*:*:*before 1.2.1VulnerableTP-Link
cpe:2.3:h:tp-link:er706w-4g:-:*:*:*:*:*:*:*not specified by NVDRunning onTP-Link
cpe:2.3:o:tp-link:er706wp-4g_firmware:*:*:*:*:*:*:*:*before 1.1.0VulnerableTP-Link
cpe:2.3:h:tp-link:er706wp-4g:-:*:*:*:*:*:*:*not specified by NVDRunning onTP-Link
cpe:2.3:o:tp-link:er703wp-4g-outdoor_firmware:*:*:*:*:*:*:*:*before 1.1.0VulnerableTP-Link
cpe:2.3:h:tp-link:er703wp-4g-outdoor:-:*:*:*:*:*:*:*not specified by NVDRunning onTP-Link
cpe:2.3:o:tp-link:dr3220v-4g_firmware:*:*:*:*:*:*:*:*before 1.1.0VulnerableTP-Link
cpe:2.3:h:tp-link:dr3220v-4g:-:*:*:*:*:*:*:*not specified by NVDRunning onTP-Link
cpe:2.3:o:tp-link:dr3650v-4g_firmware:*:*:*:*:*:*:*:*before 1.1.0VulnerableTP-Link
cpe:2.3:h:tp-link:dr3650v-4g:-:*:*:*:*:*:*:*not specified by NVDRunning onTP-Link
cpe:2.3:o:tp-link:dr3650v_firmware:*:*:*:*:*:*:*:*before 1.1.0VulnerableTP-Link
cpe:2.3:h:tp-link:dr3650v:-:*:*:*:*:*:*:*not specified by NVDRunning onTP-Link
cpe:2.3:o:tp-link:er701-5g-outdoor_firmware:*:*:*:*:*:*:*:*before 1.0.0VulnerableTP-Link
cpe:2.3:h:tp-link:er701-5g-outdoor:-:*:*:*:*:*:*:*not specified by NVDRunning onTP-Link
cpe:2.3:o:tp-link:er605w_firmware:*:*:*:*:*:*:*:*before 2.0.2VulnerableTP-Link
cpe:2.3:h:tp-link:er605w:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:o:tp-link:er7212pc_firmware:*:*:*:*:*:*:*:*before 2.2.1VulnerableTP-Link
cpe:2.3:h:tp-link:er7212pc:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:o:tp-link:fr365_firmware:*:*:*:*:*:*:*:*before 1.1.10VulnerableTP-Link
cpe:2.3:h:tp-link:fr365:-:*:*:*:*:*:*:*not specified by NVDRunning onTP-Link
cpe:2.3:o:tp-link:g36w-4g_firmware:*:*:*:*:*:*:*:*before 1.1.5VulnerableTP-Link
cpe:2.3:h:tp-link:g36w-4g:-:*:*:*:*:*:*:*not specified by NVDRunning onTP-Link
cpe:2.3:o:tp-link:eap655-wall_firmware:*:*:*:*:*:*:*:*before 1.6.2VulnerableTP-Link
cpe:2.3:h:tp-link:eap655-wall:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:o:tp-link:eap660_hd_firmware:*:*:*:*:*:*:*:*before 1.6.1VulnerableTP-Link
cpe:2.3:h:tp-link:eap660_hd:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:h:tp-link:eap660_hd:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:o:tp-link:eap620_hd_firmware:*:*:*:*:*:*:*:*before 1.6.1VulnerableTP-Link
cpe:2.3:h:tp-link:eap620_hd:3.0:*:*:*:*:*:*:*3.0Running onTP-Link
cpe:2.3:h:tp-link:eap620_hd:3.20:*:*:*:*:*:*:*3.20Running onTP-Link
cpe:2.3:o:tp-link:eap610-outdoor_firmware:*:*:*:*:*:*:*:*before 1.6.1VulnerableTP-Link
cpe:2.3:h:tp-link:eap610-outdoor:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:h:tp-link:eap610-outdoor:1.20:*:*:*:*:*:*:*1.20Running onTP-Link
cpe:2.3:o:tp-link:eap610_firmware:*:*:*:*:*:*:*:*before 1.6.1VulnerableTP-Link
cpe:2.3:h:tp-link:eap610:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:h:tp-link:eap610:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:o:tp-link:eap623-outdoor_hd_firmware:*:*:*:*:*:*:*:*before 1.6.1VulnerableTP-Link
cpe:2.3:h:tp-link:eap623-outdoor_hd:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:o:tp-link:eap625-outdoor_hd_firmware:*:*:*:*:*:*:*:*before 1.6.1VulnerableTP-Link
cpe:2.3:h:tp-link:eap625-outdoor_hd:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:o:tp-link:eap772_firmware:*:*:*:*:*:*:*:*before 1.3.2VulnerableTP-Link
cpe:2.3:h:tp-link:eap772:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:o:tp-link:eap772-outdoor_firmware:*:*:*:*:*:*:*:*before 1.3.2VulnerableTP-Link
cpe:2.3:h:tp-link:eap772-outdoor:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:o:tp-link:eap770_firmware:*:*:*:*:*:*:*:*before 1.3.2VulnerableTP-Link
cpe:2.3:h:tp-link:eap770:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:o:tp-link:eap723_firmware:*:*:*:*:*:*:*:*before 1.3.2VulnerableTP-Link
cpe:2.3:h:tp-link:eap723:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:o:tp-link:eap773_firmware:*:*:*:*:*:*:*:*before 1.1.2VulnerableTP-Link
cpe:2.3:h:tp-link:eap773:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:o:tp-link:eap783_firmware:*:*:*:*:*:*:*:*before 1.1.2VulnerableTP-Link
cpe:2.3:h:tp-link:eap783:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:o:tp-link:eap772_firmware:*:*:*:*:*:*:*:*before 1.1.2VulnerableTP-Link
cpe:2.3:h:tp-link:eap772:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:o:tp-link:eap787_firmware:*:*:*:*:*:*:*:*before 1.1.2VulnerableTP-Link
cpe:2.3:h:tp-link:eap787:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:o:tp-link:eap720_firmware:*:*:*:*:*:*:*:*before 1.1.2VulnerableTP-Link
cpe:2.3:h:tp-link:eap720:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:o:tp-link:eap723_firmware:*:*:*:*:*:*:*:*before 1.1.2VulnerableTP-Link
cpe:2.3:h:tp-link:eap723:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:o:tp-link:eap725-wall_firmware:*:*:*:*:*:*:*:*before 1.1.2VulnerableTP-Link
cpe:2.3:h:tp-link:eap725-wall:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:o:tp-link:eap215_bridge_kit_firmware:*:*:*:*:*:*:*:*before 1.1.4VulnerableTP-Link
cpe:2.3:h:tp-link:eap215_bridge_kit:3.0:*:*:*:*:*:*:*3.0Running onTP-Link
cpe:2.3:o:tp-link:eap211_bridge_kit_firmware:*:*:*:*:*:*:*:*before 1.1.4VulnerableTP-Link
cpe:2.3:h:tp-link:eap211_bridge_kit:3.0:*:*:*:*:*:*:*3.0Running onTP-Link
cpe:2.3:o:tp-link:beam_bridge_5_ur_firmware:*:*:*:*:*:*:*:*before 1.1.5VulnerableTP-Link
cpe:2.3:h:tp-link:beam_bridge_5_ur:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:o:tp-link:eap603gp-desktop_firmware:*:*:*:*:*:*:*:*before 1.1.0VulnerableTP-Link
cpe:2.3:h:tp-link:eap603gp-desktop:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:o:tp-link:eap615gp-wall_firmware:*:*:*:*:*:*:*:*before 1.1.0VulnerableTP-Link
cpe:2.3:h:tp-link:eap615gp-wall:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:h:tp-link:eap615gp-wall:1.20:*:*:*:*:*:*:*1.20Running onTP-Link
cpe:2.3:o:tp-link:eap625gp-wall_firmware:*:*:*:*:*:*:*:*before 1.1.0VulnerableTP-Link
cpe:2.3:h:tp-link:eap625gp-wall:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:h:tp-link:eap625gp-wall:1.20:*:*:*:*:*:*:*1.20Running onTP-Link
cpe:2.3:o:tp-link:eap610gp-desktop_firmware:*:*:*:*:*:*:*:*before 1.1.0VulnerableTP-Link
cpe:2.3:h:tp-link:eap610gp-desktop:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:h:tp-link:eap610gp-desktop:1.20:*:*:*:*:*:*:*1.20Running onTP-Link
cpe:2.3:h:tp-link:eap610gp-desktop:1.26:*:*:*:*:*:*:*1.26Running onTP-Link
cpe:2.3:o:tp-link:eap650gp-desktop_firmware:*:*:*:*:*:*:*:*before 1.0.1VulnerableTP-Link
cpe:2.3:h:tp-link:eap650gp-desktop:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:o:tp-link:eap653_firmware:*:*:*:*:*:*:*:*before 1.3.3VulnerableTP-Link
cpe:2.3:h:tp-link:eap653:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:o:tp-link:eap650-outdoor_firmware:*:*:*:*:*:*:*:*before 1.3.3VulnerableTP-Link
cpe:2.3:h:tp-link:eap650-outdoor:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:o:tp-link:eap230-wall_firmware:*:*:*:*:*:*:*:*before 3.3.1VulnerableTP-Link
cpe:2.3:h:tp-link:eap230-wall:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:o:tp-link:eap235-wall_firmware:*:*:*:*:*:*:*:*before 3.3.1VulnerableTP-Link
cpe:2.3:h:tp-link:eap235-wall:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:o:tp-link:eap603-outdoor_firmware:*:*:*:*:*:*:*:*before 1.5.1VulnerableTP-Link
cpe:2.3:h:tp-link:eap603-outdoor:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:o:tp-link:eap653_ur_firmware:*:*:*:*:*:*:*:*before 1.4.2VulnerableTP-Link
cpe:2.3:h:tp-link:eap653_ur:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:o:tp-link:eap650-desktop_firmware:*:*:*:*:*:*:*:*before 1.1.0VulnerableTP-Link
cpe:2.3:h:tp-link:eap650-desktop:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:o:tp-link:eap615-wall_firmware:*:*:*:*:*:*:*:*before 1.1.0VulnerableTP-Link
cpe:2.3:h:tp-link:eap615-wall:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:o:tp-link:eap100-bridge_kit_firmware:*:*:*:*:*:*:*:*before 1.0.3VulnerableTP-Link
cpe:2.3:h:tp-link:eap100-bridge_kit:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:o:tp-link:er706w-4g_firmware:*:*:*:*:*:*:*:*before 2.1.0VulnerableTP-Link
cpe:2.3:h:tp-link:er706w-4g:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:a:tp-link:omada_controller:*:*:*:*:-:*:*:*before 6.0.0.34; before 5.15.24VulnerableTP-Link
  • cpe:2.3:o:tp-link:oc200_firmware:*:*:*:*:*:*:*:* Versions before 2.22.9 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:oc200:2:*:*:*:*:*:*:* Versions 2 Running on ·TP-Link
  • cpe:2.3:o:tp-link:oc220_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:oc220:2:*:*:*:*:*:*:* Versions 2 Running on ·TP-Link
  • cpe:2.3:o:tp-link:er605_firmware:*:*:*:*:*:*:*:* Versions before 2.3.2 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:er605:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:er7206_firmware:*:*:*:*:*:*:*:* Versions before 2.2.2 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:er7206:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:er7406_firmware:*:*:*:*:*:*:*:* Versions before 1.2.2 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:er7406:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
  • cpe:2.3:o:tp-link:er707-m2_firmware:*:*:*:*:*:*:*:* Versions before 1.3.1 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:er707-m2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
  • cpe:2.3:o:tp-link:er7412-m2_firmware:*:*:*:*:*:*:*:* Versions before 1.1.0 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:er7412-m2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
  • cpe:2.3:o:tp-link:er8411_firmware:*:*:*:*:*:*:*:* Versions before 1.3.5 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:er8411:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
  • cpe:2.3:o:tp-link:er706w_firmware:*:*:*:*:*:*:*:* Versions before 1.2.1 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:er706w:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
  • cpe:2.3:o:tp-link:er706w-4g_firmware:*:*:*:*:*:*:*:* Versions before 1.2.1 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:er706w-4g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
  • cpe:2.3:o:tp-link:er706wp-4g_firmware:*:*:*:*:*:*:*:* Versions before 1.1.0 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:er706wp-4g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
  • cpe:2.3:o:tp-link:er703wp-4g-outdoor_firmware:*:*:*:*:*:*:*:* Versions before 1.1.0 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:er703wp-4g-outdoor:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
  • cpe:2.3:o:tp-link:dr3220v-4g_firmware:*:*:*:*:*:*:*:* Versions before 1.1.0 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:dr3220v-4g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
  • cpe:2.3:o:tp-link:dr3650v-4g_firmware:*:*:*:*:*:*:*:* Versions before 1.1.0 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:dr3650v-4g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
  • cpe:2.3:o:tp-link:dr3650v_firmware:*:*:*:*:*:*:*:* Versions before 1.1.0 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:dr3650v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
  • cpe:2.3:o:tp-link:er701-5g-outdoor_firmware:*:*:*:*:*:*:*:* Versions before 1.0.0 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:er701-5g-outdoor:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
  • cpe:2.3:o:tp-link:er605w_firmware:*:*:*:*:*:*:*:* Versions before 2.0.2 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:er605w:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:er7212pc_firmware:*:*:*:*:*:*:*:* Versions before 2.2.1 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:er7212pc:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:fr365_firmware:*:*:*:*:*:*:*:* Versions before 1.1.10 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:fr365:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
  • cpe:2.3:o:tp-link:g36w-4g_firmware:*:*:*:*:*:*:*:* Versions before 1.1.5 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:g36w-4g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap655-wall_firmware:*:*:*:*:*:*:*:* Versions before 1.6.2 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap655-wall:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap660_hd_firmware:*:*:*:*:*:*:*:* Versions before 1.6.1 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap660_hd:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:eap660_hd:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap620_hd_firmware:*:*:*:*:*:*:*:* Versions before 1.6.1 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap620_hd:3.0:*:*:*:*:*:*:* Versions 3.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:eap620_hd:3.20:*:*:*:*:*:*:* Versions 3.20 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap610-outdoor_firmware:*:*:*:*:*:*:*:* Versions before 1.6.1 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap610-outdoor:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:eap610-outdoor:1.20:*:*:*:*:*:*:* Versions 1.20 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap610_firmware:*:*:*:*:*:*:*:* Versions before 1.6.1 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap610:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:eap610:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap623-outdoor_hd_firmware:*:*:*:*:*:*:*:* Versions before 1.6.1 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap623-outdoor_hd:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap625-outdoor_hd_firmware:*:*:*:*:*:*:*:* Versions before 1.6.1 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap625-outdoor_hd:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap772_firmware:*:*:*:*:*:*:*:* Versions before 1.3.2 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap772:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap772-outdoor_firmware:*:*:*:*:*:*:*:* Versions before 1.3.2 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap772-outdoor:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap770_firmware:*:*:*:*:*:*:*:* Versions before 1.3.2 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap770:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap723_firmware:*:*:*:*:*:*:*:* Versions before 1.3.2 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap723:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap773_firmware:*:*:*:*:*:*:*:* Versions before 1.1.2 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap773:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap783_firmware:*:*:*:*:*:*:*:* Versions before 1.1.2 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap783:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap772_firmware:*:*:*:*:*:*:*:* Versions before 1.1.2 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap772:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap787_firmware:*:*:*:*:*:*:*:* Versions before 1.1.2 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap787:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap720_firmware:*:*:*:*:*:*:*:* Versions before 1.1.2 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap720:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap723_firmware:*:*:*:*:*:*:*:* Versions before 1.1.2 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap723:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap725-wall_firmware:*:*:*:*:*:*:*:* Versions before 1.1.2 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap725-wall:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap215_bridge_kit_firmware:*:*:*:*:*:*:*:* Versions before 1.1.4 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap215_bridge_kit:3.0:*:*:*:*:*:*:* Versions 3.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap211_bridge_kit_firmware:*:*:*:*:*:*:*:* Versions before 1.1.4 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap211_bridge_kit:3.0:*:*:*:*:*:*:* Versions 3.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:beam_bridge_5_ur_firmware:*:*:*:*:*:*:*:* Versions before 1.1.5 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:beam_bridge_5_ur:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap603gp-desktop_firmware:*:*:*:*:*:*:*:* Versions before 1.1.0 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap603gp-desktop:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap615gp-wall_firmware:*:*:*:*:*:*:*:* Versions before 1.1.0 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap615gp-wall:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:eap615gp-wall:1.20:*:*:*:*:*:*:* Versions 1.20 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap625gp-wall_firmware:*:*:*:*:*:*:*:* Versions before 1.1.0 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap625gp-wall:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:eap625gp-wall:1.20:*:*:*:*:*:*:* Versions 1.20 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap610gp-desktop_firmware:*:*:*:*:*:*:*:* Versions before 1.1.0 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap610gp-desktop:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:eap610gp-desktop:1.20:*:*:*:*:*:*:* Versions 1.20 Running on ·TP-Link
  • cpe:2.3:h:tp-link:eap610gp-desktop:1.26:*:*:*:*:*:*:* Versions 1.26 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap650gp-desktop_firmware:*:*:*:*:*:*:*:* Versions before 1.0.1 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap650gp-desktop:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap653_firmware:*:*:*:*:*:*:*:* Versions before 1.3.3 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap653:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap650-outdoor_firmware:*:*:*:*:*:*:*:* Versions before 1.3.3 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap650-outdoor:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap230-wall_firmware:*:*:*:*:*:*:*:* Versions before 3.3.1 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap230-wall:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap235-wall_firmware:*:*:*:*:*:*:*:* Versions before 3.3.1 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap235-wall:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap603-outdoor_firmware:*:*:*:*:*:*:*:* Versions before 1.5.1 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap603-outdoor:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap653_ur_firmware:*:*:*:*:*:*:*:* Versions before 1.4.2 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap653_ur:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap650-desktop_firmware:*:*:*:*:*:*:*:* Versions before 1.1.0 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap650-desktop:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap615-wall_firmware:*:*:*:*:*:*:*:* Versions before 1.1.0 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap615-wall:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:eap100-bridge_kit_firmware:*:*:*:*:*:*:*:* Versions before 1.0.3 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:eap100-bridge_kit:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:er706w-4g_firmware:*:*:*:*:*:*:*:* Versions before 2.1.0 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:er706w-4g:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:a:tp-link:omada_controller:*:*:*:*:-:*:*:* Versions before 6.0.0.34; before 5.15.24 Vulnerable ·TP-Link

Remediation

  • Fix · CNA Omada Software Controller (TP-Link Systems Inc.) Fixed in 6.0.0.24
  • Fix · CNA Omada Cloud Controller (TP-Link Systems Inc.) Fixed in 6.0.0.100
  • Fix · CNA Omada Hardware Controller (OC200, OC300, OC400) (TP-Link Systems Inc.) Fixed in 6.0.0.34
  • Fix · CNA Omada Hardware Controller OC220 (TP-Link Systems Inc.) Fixed in 5.15.24
  • Fix · CNA Omada Gateway (ER605 v2.0) (TP-Link Systems Inc.) Fixed in 2.3.2 Build 20251029 Rel.12727
  • Fix · CNA Omada Gateway (ER7206 v2.0) (TP-Link Systems Inc.) Fixed in 2.2.2 Build 20250724 Rel.11109
  • Fix · CNA Omada Gateway (ER7406, ER706W, ER706-4G) (TP-Link Systems Inc.) Fixed in 1.2.x
  • Fix · CNA Omada Gateway (ER707-M2, ER-8411) (TP-Link Systems Inc.) Fixed in 1.3.x
  • Fix · CNA Omada Gateway (ER7412-M2, ER706WP-4G, ER703WP-4G-Outdoor, DR3220v-4G, DR3650v, DR3650v-4G) (TP-Link Systems Inc.) Fixed in 1.1.0
  • Fix · CNA Omada Gateway (ER8411) (TP-Link Systems Inc.) Fixed in 1.3.5 Build 20251028 Rel.06811
  • Fix · CNA Omada Gateway (ER706W-4G 2.0) (TP-Link Systems Inc.) Fixed in 2.1.0 Build 20250810 Rel.77020
  • Fix · CNA Omada Gateway (ER701-5G-Outdoor) (TP-Link Systems Inc.) Fixed in 1.0.0 Build 20250826 Rel.68862
  • Fix · CNA Omada Gateway (ER605W 2.0) (TP-Link Systems Inc.) Fixed in 2.0.2 Build 20250723 Rel.39048
  • Fix · CNA Omada Gateway ER7212PC 2.0 (TP-Link Systems Inc.) Fixed in 2.2.1 Build 20251027 Rel.75129
  • Fix · CNA Omada Festa Gateway FR365 (TP-Link Systems Inc.) Fixed in 1.1.10 Build 20250626 Rel.81746
  • Fix · CNA Omada Gateway G36W-4G (TP-Link Systems Inc.) Fixed in 1.1.5 Build 20250710 Rel.62142
  • Fix · CNA Omada Access Point (EAP660 HD v1.0/v2.0, EAP620 HD v2.0/v3.0/v3.20, EAP610/EAP610-Outdoor v1.0/v2.0, EAP623-Outdoor HD v1.0, EAP625-Outdoor HD v1.0)EAP (TP-Link Systems Inc.) Fixed in 1.6.1
  • Fix · CNA Omada Access Point (EAP655-Wall v1.0) (TP-Link Systems Inc.) Fixed in 1.6.2 Build 20251107 Rel.35700
  • Fix · CNA Omada Access Point (EAP772 v1.0, EAP773 v1.0, EAP783 v1.0, EAP787 v1.0, EAP720 v1.0, EAP725-Wall v1.0, EAp723 v2.0) (TP-Link Systems Inc.) Fixed in 1.1.2
  • Fix · CNA Omada Access Point (EAP723 v1.0, EAP772 v2.0, EAP772-Outdoor v 1.0, EAP770 v2.0) (TP-Link Systems Inc.) Fixed in 1.3.2 Build 20250901 Rel.52255
  • Fix · CNA Omada Access Point (EAP215 Bridge KIT 3.0, EAP211 Bridge KIT 3.0) (TP-Link Systems Inc.) Fixed in 1.1.4 Build 20251112 Rel.34769
  • Fix · CNA Omada Beam Bridge 5 UR v1.0 (TP-Link Systems Inc.) Fixed in 1.1.5 Build 20250928 Rel.68499
  • Fix · CNA Omada Access Point (EAP603GP-Desktop, EAP615GP-Wall 1.20, EAP625GP-Wall 1.0/1.20, EAP610GP-Desktop 1.0/1.20/1.26), EAP650-Desktop v1.0) (TP-Link Systems Inc.) Fixed in 1.1.0
  • Fix · CNA Omada Access Point (EAP650GP-Desktop 1.0) (TP-Link Systems Inc.) Fixed in 1.0.1 Build 20250819 Rel.60298
  • Fix · CNA Omada Access Point (EAP653 v1.0, EAP650-Outdoor v1.0) (TP-Link Systems Inc.) Fixed in 1.3.3 Build 20251111 Rel.72627
  • Fix · CNA Omada Access Point (EAP230-Wall v1.0, EAP235-Wall v1.0) (TP-Link Systems Inc.) Fixed in 3.3.1 Build 20251203 Rel.58135
  • Fix · CNA Omada Access Point (EAP603-Outdoor v1.0, EAP615-Wall v1.0/v1.20) (TP-Link Systems Inc.) Fixed in 1.5.1
  • Fix · CNA Omada Access Point (EAP653 UR v1.0) (TP-Link Systems Inc.) Fixed in 1.4.2 Build 20251208 Rel.43830
  • Fix · CNA Omada Access Point (EAP615-Wall v1.0/v1.20) (TP-Link Systems Inc.) Fixed in 1.5.10 Build 20250903 Rel.49784
  • Fix · CNA Omada EAP100-Bridge KIT v1.0 (TP-Link Systems Inc.) Fixed in 1.0.3 Build 20251015 Rel.62058

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    TP-Link Systems Omada Cloud Controller, Omada Software Controller — support.omadanetworks.com/us/document/114950

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2025-08514 Cross-Site Scripting (XSS) on Omada ControllersPriority LOW 25
    Show all 2 records → Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-9290
  2. 2026-10-03 Alias added: GHSA-gwgw-6q3h-28pg
  3. 2026-10-07 Fix available: TP-Link Systems Inc./Omada Access Point (EAP603GP-Desktop, EAP615GP-Wall 1.20, EAP625GP-Wall 1.0/1.20, EAP610GP-Desktop 1.0/1.20/1.26), EAP650-Desktop v1.0)@1.1.0 · CNA

References

Patch 2

Advisory 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences