Vulnpedia
← All CVEs

CVE-2025-15544

MEDIUM 6.9

Published 2026-08-03 · Last modified 2026-08-03

A cryptographic weakness exists in the Omada device adoption process.  During adoption, authentication credentials associated with site management are transmitted using a weak hashing algorithm that does not provide sufficient protection. An attacker who successfully intercepts adoption-related authentication traffic may be able to recover valid credentials and gain unauthorized access to managed devices or controller-managed environments.

NO EXPLOITATION SIGNALS

No known exploitation, public exploit, or elevated probability at this time. Track for changes.

Exploitation likelihood

0.2%chance of exploitation in 30 days · 10th percentile

○ In CISA KEV ○ Public exploit / PoC

Impact if exploited

6.9CVSS 4.0 · MEDIUM

  • ConfidentialityHigh
  • IntegrityNone
  • AvailabilityNone

What an attacker needs

  • ⚠Access: Must sit on the same / adjacent network
  • ✓Privileges: No account or privileges required
  • ⚠User interaction: Succeeds with passive user activity
  • ⚠Complexity: Needs a race window or specific setup
  • ⚠Requirements: Specific conditions must be present

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept & exploit code

Test against your own equipment

curl -s https://vulnpedia.com/cve/CVE-2025-15544/poc.jsonMachine-readable PoC index for this CVE (for automation).

Listed for defensive triage, patch verification, and authorized testing on systems you own. Machine-readable: /cve/CVE-2025-15544/poc.json

Affected

Vendors Tp Link Systems Inc. Tp Link Systems Inc. Tp Link Systems Inc Tp Link

Products Omada Gateways Omada Switches Omada Access Points Omada App Omada Controllers Omada Olts Omada Oc200 V3 Firmware Omada Oc200 V3 Omada Oc300 Firmware Omada Oc300 Omada Oc400 Firmware Omada Oc400

Weakness (CWE)

  • CWE-759: Use of a One-Way hash without a salt

CVSS vector

CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

Known Affected Software Configurations

VendorProductVersion range
Tp LinkOmada Oc200 V3 Firmware*
Tp LinkOmada Oc300 Firmware*
Tp LinkOmada Oc400 Firmware*
Tp LinkOmada Fusion 2.5g Firmware*
Tp LinkOmada Er707 M2 Firmware*
Tp LinkOmada Er7206 Firmware*
Tp LinkOmada Er706w Firmware*
Tp LinkOmada Er8411 Firmware*
Tp LinkOmada Er605 Firmware*
Tp LinkOmada Er7412 M2 Firmware*
Tp LinkOmada Er706w 4g Firmware*
Tp LinkOmada Er703wp 4g Outdoor Firmware*
Tp LinkOmada Er706wp 4g Firmware*
Tp LinkOmada S7500 24y4c Firmware*
Tp LinkOmada S7500 26xf6y Firmware*
Tp LinkOmada S6500 48mpp6y Firmware*
Tp LinkOmada S6500 24mpp4y Firmware*
Tp LinkOmada S6500 48gp6xf Firmware*
Tp LinkOmada S6500 48g6xf Firmware*
Tp LinkOmada S6500 24gp4xf Firmware*
Tp LinkOmada S6500 24g4xf Firmware*
Tp LinkOmada Sx6632yf Firmware*
Tp LinkOmada Sx3032f Firmware*
Tp LinkOmada Sx3016f Firmware*
Tp LinkOmada Sx3008f Firmware*
Tp LinkOmada Sg3428xf Firmware*
Tp LinkOmada Sx3832mpp Firmware*
Tp LinkOmada Sx3832 Firmware*
Tp LinkOmada Sx3206hpp Firmware*
Tp LinkOmada Sg3428xpp M2 Firmware*
Tp LinkOmada Sg3428x M2 Firmware*
Tp LinkOmada Sg3218xp M2 Firmware*
Tp LinkOmada Sg3210xhp M2 Firmware*
Tp LinkOmada Sg3210x M2 Firmware*
Tp LinkOmada Sg2210xmp M2 Firmware*
Tp LinkOmada Sg6654xhp Firmware*
Tp LinkOmada Sg6654x Firmware*
Tp LinkOmada Sg6428xhp Firmware*
Tp LinkOmada Sg6428x Firmware*
Tp LinkOmada Sg5452xmpp Firmware*
Tp LinkOmada Sg5452x Firmware*
Tp LinkOmada Sg5428xmpp Firmware*
Tp LinkOmada Sg5428x Firmware*
Tp LinkOmada Sg3452xmpp Firmware*
Tp LinkOmada Sg3452xp Firmware*
Tp LinkOmada Tl Sg3452x Firmware*
Tp LinkOmada Sg3428xmpp Firmware*
Tp LinkOmada Sg3428xmp Firmware*
Tp LinkOmada Sg3428x Firmware*
Tp LinkOmada Sg2005p Pd Firmware*
Tp LinkOmada Sg3452p Firmware*
Tp LinkOmada Sg3452 Firmware*
Tp LinkOmada Sg3428mp Firmware*
Tp LinkOmada Sg3428 Firmware*
Tp LinkOmada Sg3210 Firmware*
Tp LinkOmada Tl Sg3210 Firmware*
Tp LinkOmada Sg2452lp Firmware*
Tp LinkOmada Sg2428p Firmware*
Tp LinkOmada Sg2428lp Firmware*
Tp LinkOmada Sg2218p Firmware*
Tp LinkOmada Sg2218 Firmware*
Tp LinkOmada Sg2016p Firmware*
Tp LinkOmada Sg2210mp Firmware*
Tp LinkOmada Sg2210p Firmware*
Tp LinkOmada Sg2008p Firmware*
Tp LinkOmada Sg2008 Firmware*
Tp LinkOmada Sg2206mp Firmware*
Tp LinkOmada Es210xpp M2 Firmware*
Tp LinkOmada Es210x M2 Firmware*
Tp LinkOmada Es206xpp M2 Firmware*
Tp LinkOmada Es206x M2 Firmware*
Tp LinkOmada Es228gmp Firmware*
Tp LinkOmada Es228gp Firmware*
Tp LinkOmada Es224g Firmware*
Tp LinkOmada Es220gp Firmware*
Tp LinkOmada Es216g Firmware*
Tp LinkOmada Es210gmp Firmware*
Tp LinkOmada Es210gp Firmware*
Tp LinkOmada Es208gp Firmware*
Tp LinkOmada Es208g Firmware*
Tp LinkOmada Es206gp Firmware*
Tp LinkOmada Es205gp Firmware*
Tp LinkOmada Es205g Firmware*
Tp LinkOmada Es220gmp Firmware*
Tp LinkOmada Es1024ge Firmware*
Tp LinkOmada Ds1016ge Firmware*
Tp LinkOmada Ds108ge Firmware*
Tp LinkOmada Ds105ge Firmware*
Tp LinkOmada Ds1008x Firmware*
Tp LinkOmada Ds105x Firmware*
Tp LinkOmada Ds108g M2 Firmware*
Tp LinkOmada Ds105g M2 Firmware*
Tp LinkOmada Ds1024g Firmware*
Tp LinkOmada Ds1016g Firmware*
Tp LinkOmada Ds110gmp Firmware*
Tp LinkOmada Ds108g Firmware*
Tp LinkOmada Ds106gpp Firmware*
Tp LinkOmada Ds106p Firmware*
Tp LinkOmada Ds105g Firmware*
Tp LinkOmada Ds111p Firmware*
Tp LinkOmada Ds1018gmp Firmware*
Tp LinkOmada Ds108gp Firmware*
Tp LinkOmada Ds105gp Firmware*
Tp LinkOmada Ies210gpp Firmware*
Tp LinkOmada Ies206gpp Firmware*
Tp LinkOmada Ies208g Firmware*
Tp LinkOmada Ies206g Firmware*
Tp LinkOmada Eap660hd Firmware*
Tp LinkOmada Eap620hd Firmware*
Tp LinkOmada Eap610 Firmware*
Tp LinkOmada Eap615 Wall Firmware*
Tp LinkOmada Eap610 Outdoor Firmware*
Tp LinkOmada*

All CVSS metrics

  • MEDIUM 6.9 v4.0 · CNA Primary
    CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
  • MEDIUM 6.9 v4.0 · NVD Secondary
    CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
  • MEDIUM 5.9 v3.1 · NVD Primary
    CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

References

Patches & mitigations

Advisories

Sources: NVD · CVE.org · EPSS