CVE-2025-15544CWE-759

CVE-2025-15544

Medium · published August 3, 2026

CVSS v3.1
5.9
EPSS
0%
Percentile
26.5
In the wild
Unconfirmed
What it is

A cryptographic

weakness exists in the Omada device adoption process.  During adoption, authentication credentials associated

with site management are transmitted using a weak hashing algorithm that does

not provide sufficient protection.

An attacker who

successfully intercepts adoption-related authentication traffic may be able to

recover valid credentials and gain unauthorized access to managed devices or

controller-managed environments.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00343 · 26.5th percentile
Weakness
CWE-759 · Use of a One-Way Hash without a Salt
Published
2026-08-03T23:16Z
Affected products (113)
ProductVersionsFixed in
tp-link/omada_oc200_v3_firmwareall versions—
tp-link/omada_oc300_firmwareall versions—
tp-link/omada_oc400_firmwareall versions—
tp-link/omada_fusion_2.5g_firmwareall versions—
tp-link/omada_er707-m2_firmwareall versions—
tp-link/omada_er7206_firmwareall versions—
tp-link/omada_er706w_firmwareall versions—
tp-link/omada_er8411_firmwareall versions—
tp-link/omada_er605_firmwareall versions—
tp-link/omada_er7412-m2_firmwareall versions—
tp-link/omada_er706w-4g_firmwareall versions—
tp-link/omada_er703wp-4g-outdoor_firmwareall versions—
tp-link/omada_er706wp-4g_firmwareall versions—
tp-link/omada_s7500-24y4c_firmwareall versions—
tp-link/omada_s7500-26xf6y_firmwareall versions—
tp-link/omada_s6500-48mpp6y_firmwareall versions—
tp-link/omada_s6500-24mpp4y_firmwareall versions—
tp-link/omada_s6500-48gp6xf_firmwareall versions—
tp-link/omada_s6500-48g6xf_firmwareall versions—
tp-link/omada_s6500-24gp4xf_firmwareall versions—
tp-link/omada_s6500-24g4xf_firmwareall versions—
tp-link/omada_sx6632yf_firmwareall versions—
tp-link/omada_sx3032f_firmwareall versions—
tp-link/omada_sx3016f_firmwareall versions—
tp-link/omada_sx3008f_firmwareall versions—
tp-link/omada_sg3428xf_firmwareall versions—
tp-link/omada_sx3832mpp_firmwareall versions—
tp-link/omada_sx3832_firmwareall versions—
tp-link/omada_sx3206hpp_firmwareall versions—
tp-link/omada_sg3428xpp-m2_firmwareall versions—
tp-link/omada_sg3428x-m2_firmwareall versions—
tp-link/omada_sg3218xp-m2_firmwareall versions—
tp-link/omada_sg3210xhp-m2_firmwareall versions—
tp-link/omada_sg3210x-m2_firmwareall versions—
tp-link/omada_sg2210xmp-m2_firmwareall versions—
tp-link/omada_sg6654xhp_firmwareall versions—
tp-link/omada_sg6654x_firmwareall versions—
tp-link/omada_sg6428xhp_firmwareall versions—
tp-link/omada_sg6428x_firmwareall versions—
tp-link/omada_sg5452xmpp_firmwareall versions—
tp-link/omada_sg5452x_firmwareall versions—
tp-link/omada_sg5428xmpp_firmwareall versions—
tp-link/omada_sg5428x_firmwareall versions—
tp-link/omada_sg3452xmpp_firmwareall versions—
tp-link/omada_sg3452xp_firmwareall versions—
tp-link/omada_tl-sg3452x_firmwareall versions—
tp-link/omada_sg3428xmpp_firmwareall versions—
tp-link/omada_sg3428xmp_firmwareall versions—
tp-link/omada_sg3428x_firmwareall versions—
tp-link/omada_sg2005p-pd_firmwareall versions—
tp-link/omada_sg3452p_firmwareall versions—
tp-link/omada_sg3452_firmwareall versions—
tp-link/omada_sg3428mp_firmwareall versions—
tp-link/omada_sg3428_firmwareall versions—
tp-link/omada_sg3210_firmwareall versions—
tp-link/omada_tl-sg3210_firmwareall versions—
tp-link/omada_sg2452lp_firmwareall versions—
tp-link/omada_sg2428p_firmwareall versions—
tp-link/omada_sg2428lp_firmwareall versions—
tp-link/omada_sg2218p_firmwareall versions—
tp-link/omada_sg2218_firmwareall versions—
tp-link/omada_sg2016p_firmwareall versions—
tp-link/omada_sg2210mp_firmwareall versions—
tp-link/omada_sg2210p_firmwareall versions—
tp-link/omada_sg2008p_firmwareall versions—
tp-link/omada_sg2008_firmwareall versions—
tp-link/omada_sg2206mp_firmwareall versions—
tp-link/omada_es210xpp-m2_firmwareall versions—
tp-link/omada_es210x-m2_firmwareall versions—
tp-link/omada_es206xpp-m2_firmwareall versions—
tp-link/omada_es206x-m2_firmwareall versions—
tp-link/omada_es228gmp_firmwareall versions—
tp-link/omada_es228gp_firmwareall versions—
tp-link/omada_es224g_firmwareall versions—
tp-link/omada_es220gp_firmwareall versions—
tp-link/omada_es216g_firmwareall versions—
tp-link/omada_es210gmp_firmwareall versions—
tp-link/omada_es210gp_firmwareall versions—
tp-link/omada_es208gp_firmwareall versions—
tp-link/omada_es208g_firmwareall versions—
tp-link/omada_es206gp_firmwareall versions—
tp-link/omada_es205gp_firmwareall versions—
tp-link/omada_es205g_firmwareall versions—
tp-link/omada_es220gmp_firmwareall versions—
tp-link/omada_es1024ge_firmwareall versions—
tp-link/omada_ds1016ge_firmwareall versions—
tp-link/omada_ds108ge_firmwareall versions—
tp-link/omada_ds105ge_firmwareall versions—
tp-link/omada_ds1008x_firmwareall versions—
tp-link/omada_ds105x_firmwareall versions—
tp-link/omada_ds108g-m2_firmwareall versions—
tp-link/omada_ds105g-m2_firmwareall versions—
tp-link/omada_ds1024g_firmwareall versions—
tp-link/omada_ds1016g_firmwareall versions—
tp-link/omada_ds110gmp_firmwareall versions—
tp-link/omada_ds108g_firmwareall versions—
tp-link/omada_ds106gpp_firmwareall versions—
tp-link/omada_ds106p_firmwareall versions—
tp-link/omada_ds105g_firmwareall versions—
tp-link/omada_ds111p_firmwareall versions—
tp-link/omada_ds1018gmp_firmwareall versions—
tp-link/omada_ds108gp_firmwareall versions—
tp-link/omada_ds105gp_firmwareall versions—
tp-link/omada_ies210gpp_firmwareall versions—
tp-link/omada_ies206gpp_firmwareall versions—
tp-link/omada_ies208g_firmwareall versions—
tp-link/omada_ies206g_firmwareall versions—
tp-link/omada_eap660hd_firmwareall versions—
tp-link/omada_eap620hd_firmwareall versions—
tp-link/omada_eap610_firmwareall versions—
tp-link/omada_eap615-wall_firmwareall versions—
tp-link/omada_eap610-outdoor_firmwareall versions—
tp-link/omadaall versions—
References (3)
EPSS history
Timeline
  • 03 AUG 17:49Z
    Weak Credential Protection During TP-Link Omada Device Adoption
    cvelistv5