CVE-2025-9290

MEDIUM EPSS 10.1%
Published Jan 23, 20265mo ago · Modified Jun 17, 20261w ago
6.0 CVSS 4.0
Medium
Find Similar
Published Jan 23, 2026 5mo ago
Last Modified Jun 17, 2026 1w ago

Description

An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values. Exploitation requires advanced network positioning and allows an attacker to intercept adoption traffic and forge valid authentication through offline precomputation, potentially exposing sensitive information and compromising confidentiality.

CVSS Details

Base Score
6.0
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Adjacent
Attack Complexity High
Privileges Required None
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
10.1% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-760

Affected Products 138

VendorProductVersionRange
tp-linkomada_controller* <6.0.0.24
tp-linkomada_controller* <6.0.0.100
tp-linkoc200_firmware* <1.37.9
tp-linkoc2001any
tp-linkoc220_firmware* <1.1.3
tp-linkoc2201any
tp-linkoc300_firmware* <1.31.9
tp-linkoc3001.6any
tp-linkoc400_firmware* <1.9.9
tp-linkoc4001.6any
tp-linkoc200_firmware* <2.22.9
tp-linkoc2002any
tp-linkoc220_firmware*any
tp-linkoc2202any
tp-linker605_firmware* <2.3.2
tp-linker6052.0any
tp-linker7206_firmware* <2.2.2
tp-linker72062.0any
tp-linker7406_firmware* <1.2.2
tp-linker7406*any
tp-linker707-m2_firmware* <1.3.1
tp-linker707-m2*any
tp-linker7412-m2_firmware* <1.1.0
tp-linker7412-m2*any
tp-linker8411_firmware* <1.3.5
tp-linker8411*any
tp-linker706w_firmware* <1.2.1
tp-linker706w*any
tp-linker706w-4g_firmware* <1.2.1
tp-linker706w-4g*any
tp-linker706wp-4g_firmware* <1.1.0
tp-linker706wp-4g*any
tp-linker703wp-4g-outdoor_firmware* <1.1.0
tp-linker703wp-4g-outdoor*any
tp-linkdr3220v-4g_firmware* <1.1.0
tp-linkdr3220v-4g*any
tp-linkdr3650v-4g_firmware* <1.1.0
tp-linkdr3650v-4g*any
tp-linkdr3650v_firmware* <1.1.0
tp-linkdr3650v*any
tp-linker701-5g-outdoor_firmware* <1.0.0
tp-linker701-5g-outdoor*any
tp-linker605w_firmware* <2.0.2
tp-linker605w2.0any
tp-linker7212pc_firmware* <2.2.1
tp-linker7212pc2.0any
tp-linkfr365_firmware* <1.1.10
tp-linkfr365*any
tp-linkg36w-4g_firmware* <1.1.5
tp-linkg36w-4g*any
tp-linkeap655-wall_firmware* <1.6.2
tp-linkeap655-wall1.0any
tp-linkeap660_hd_firmware* <1.6.1
tp-linkeap660_hd1.0any
tp-linkeap660_hd2.0any
tp-linkeap620_hd_firmware* <1.6.1
tp-linkeap620_hd3.0any
tp-linkeap620_hd3.20any
tp-linkeap610-outdoor_firmware* <1.6.1
tp-linkeap610-outdoor1.0any
tp-linkeap610-outdoor1.20any
tp-linkeap610_firmware* <1.6.1
tp-linkeap6101.0any
tp-linkeap6102.0any
tp-linkeap623-outdoor_hd_firmware* <1.6.1
tp-linkeap623-outdoor_hd1.0any
tp-linkeap625-outdoor_hd_firmware* <1.6.1
tp-linkeap625-outdoor_hd1.0any
tp-linkeap772_firmware* <1.3.2
tp-linkeap7722.0any
tp-linkeap772-outdoor_firmware* <1.3.2
tp-linkeap772-outdoor1.0any
tp-linkeap770_firmware* <1.3.2
tp-linkeap7702.0any
tp-linkeap723_firmware* <1.3.2
tp-linkeap7231.0any
tp-linkeap773_firmware* <1.1.2
tp-linkeap7731.0any
tp-linkeap783_firmware* <1.1.2
tp-linkeap7831.0any
tp-linkeap772_firmware* <1.1.2
tp-linkeap7721.0any
tp-linkeap787_firmware* <1.1.2
tp-linkeap7871.0any
tp-linkeap720_firmware* <1.1.2
tp-linkeap7201.0any
tp-linkeap723_firmware* <1.1.2
tp-linkeap7232.0any
tp-linkeap725-wall_firmware* <1.1.2
tp-linkeap725-wall1.0any
tp-linkeap215_bridge_kit_firmware* <1.1.4
tp-linkeap215_bridge_kit3.0any
tp-linkeap211_bridge_kit_firmware* <1.1.4
tp-linkeap211_bridge_kit3.0any
tp-linkbeam_bridge_5_ur_firmware* <1.1.5
tp-linkbeam_bridge_5_ur1.0any
tp-linkeap603gp-desktop_firmware* <1.1.0
tp-linkeap603gp-desktop1.0any
tp-linkeap615gp-wall_firmware* <1.1.0
tp-linkeap615gp-wall1.0any
tp-linkeap615gp-wall1.20any
tp-linkeap625gp-wall_firmware* <1.1.0
tp-linkeap625gp-wall1.0any
tp-linkeap625gp-wall1.20any
tp-linkeap610gp-desktop_firmware* <1.1.0
tp-linkeap610gp-desktop1.0any
tp-linkeap610gp-desktop1.20any
tp-linkeap610gp-desktop1.26any
tp-linkeap650gp-desktop_firmware* <1.0.1
tp-linkeap650gp-desktop1.0any
tp-linkeap653_firmware* <1.3.3
tp-linkeap6531.0any
tp-linkeap650-outdoor_firmware* <1.3.3
tp-linkeap650-outdoor1.0any
tp-linkeap230-wall_firmware* <3.3.1
tp-linkeap230-wall1.0any
tp-linkeap235-wall_firmware* <3.3.1
tp-linkeap235-wall1.0any
tp-linkeap603-outdoor_firmware* <1.5.1
tp-linkeap603-outdoor1.0any
tp-linkeap653_ur_firmware* <1.4.2
tp-linkeap653_ur1.0any
tp-linkeap650-desktop_firmware* <1.1.0
tp-linkeap650-desktop1.0any
tp-linkeap615-wall_firmware* <1.1.0
tp-linkeap615-wall1.0any
tp-linkeap100-bridge_kit_firmware* <1.0.3
tp-linkeap100-bridge_kit1.0any
tp-linker706w-4g_firmware* <2.1.0
tp-linker706w-4g2.0any
tp-linkomada_controller* <6.0.0.34
tp-linkoc2001any
tp-linkoc2002any
tp-linkoc3001.6any
tp-linkoc4001.6any
tp-linkomada_controller* <5.15.24
tp-linkoc2201any
tp-linkoc2202any

References 3

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.