CVE-2025-15631CWE-759

CVE-2025-15631

Medium · published August 3, 2026

CVSS v3.1
5.9
EPSS
0%
Percentile
21.6
In the wild
Unconfirmed
What it is

A

cryptographic weakness exists in affected Omada devices where site credentials

are protected using a legacy hashing algorithm that does not provide sufficient

protection.

An attacker

who obtains access to stored credential data may be able to recover valid credentials

to gain unauthorized access to affected devices or management environments.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00301 · 21.6th percentile
Weakness
CWE-759 · Use of a One-Way Hash without a Salt
Published
2026-08-03T23:16Z
Affected products (109)
ProductVersionsFixed in
tp-link/omada_er7206_firmwareall versions—
tp-link/omada_er706w_firmwareall versions—
tp-link/omada_er8411_firmwareall versions—
tp-link/omada_er605_firmwareall versions—
tp-link/omada_er7412-m2_firmwareall versions—
tp-link/omada_er706w-4g_firmwareall versions—
tp-link/omada_er703wp-4g-outdoor_firmwareall versions—
tp-link/omada_er706wp-4g_firmwareall versions—
tp-link/omada_s7500-24y4c_firmwareall versions—
tp-link/omada_s7500-26xf6y_firmwareall versions—
tp-link/omada_s6500-48mpp6y_firmwareall versions—
tp-link/omada_s6500-24mpp4y_firmwareall versions—
tp-link/omada_s6500-48gp6xf_firmwareall versions—
tp-link/omada_s6500-48g6xf_firmwareall versions—
tp-link/omada_s6500-24gp4xf_firmwareall versions—
tp-link/omada_s6500-24g4xf_firmwareall versions—
tp-link/omada_sx6632yf_firmwareall versions—
tp-link/omada_sx3032f_firmwareall versions—
tp-link/omada_sx3016f_firmwareall versions—
tp-link/omada_sx3008f_firmwareall versions—
tp-link/omada_sg3428xf_firmwareall versions—
tp-link/omada_sx3832mpp_firmwareall versions—
tp-link/omada_sx3832_firmwareall versions—
tp-link/omada_sx3206hpp_firmwareall versions—
tp-link/omada_sg3428xpp-m2_firmwareall versions—
tp-link/omada_sg3428x-m2_firmwareall versions—
tp-link/omada_sg3218xp-m2_firmwareall versions—
tp-link/omada_sg3210xhp-m2_firmwareall versions—
tp-link/omada_sg3210x-m2_firmwareall versions—
tp-link/omada_sg2210xmp-m2_firmwareall versions—
tp-link/omada_sg6654xhp_firmwareall versions—
tp-link/omada_sg6654x_firmwareall versions—
tp-link/omada_sg6428xhp_firmwareall versions—
tp-link/omada_sg6428x_firmwareall versions—
tp-link/omada_sg5452xmpp_firmwareall versions—
tp-link/omada_sg5452x_firmwareall versions—
tp-link/omada_sg5428xmpp_firmwareall versions—
tp-link/omada_sg5428x_firmwareall versions—
tp-link/omada_sg3452xmpp_firmwareall versions—
tp-link/omada_sg3452xp_firmwareall versions—
tp-link/omada_tl-sg3452x_firmwareall versions—
tp-link/omada_sg3428xmpp_firmwareall versions—
tp-link/omada_sg3428xmp_firmwareall versions—
tp-link/omada_sg3428x_firmwareall versions—
tp-link/omada_sg2005p-pd_firmwareall versions—
tp-link/omada_sg3452p_firmwareall versions—
tp-link/omada_sg3452_firmwareall versions—
tp-link/omada_sg3428mp_firmwareall versions—
tp-link/omada_sg3428_firmwareall versions—
tp-link/omada_sg3210_firmwareall versions—
tp-link/omada_tl-sg3210_firmwareall versions—
tp-link/omada_sg2452lp_firmwareall versions—
tp-link/omada_sg2428p_firmwareall versions—
tp-link/omada_sg2428lp_firmwareall versions—
tp-link/omada_sg2218p_firmwareall versions—
tp-link/omada_sg2218_firmwareall versions—
tp-link/omada_sg2016p_firmwareall versions—
tp-link/omada_sg2210mp_firmwareall versions—
tp-link/omada_sg2210p_firmwareall versions—
tp-link/omada_sg2008p_firmwareall versions—
tp-link/omada_sg2008_firmwareall versions—
tp-link/omada_sg2206mp_firmwareall versions—
tp-link/omada_es210xpp-m2_firmwareall versions—
tp-link/omada_es210x-m2_firmwareall versions—
tp-link/omada_es206xpp-m2_firmwareall versions—
tp-link/omada_es206x-m2_firmwareall versions—
tp-link/omada_es228gmp_firmwareall versions—
tp-link/omada_es228gp_firmwareall versions—
tp-link/omada_es224g_firmwareall versions—
tp-link/omada_es220gp_firmwareall versions—
tp-link/omada_es216g_firmwareall versions—
tp-link/omada_es210gmp_firmwareall versions—
tp-link/omada_es210gp_firmwareall versions—
tp-link/omada_es208gp_firmwareall versions—
tp-link/omada_es208g_firmwareall versions—
tp-link/omada_es206gp_firmwareall versions—
tp-link/omada_es205gp_firmwareall versions—
tp-link/omada_es205g_firmwareall versions—
tp-link/omada_es220gmp_firmwareall versions—
tp-link/omada_es1024ge_firmwareall versions—
tp-link/omada_ds1016ge_firmwareall versions—
tp-link/omada_ds108ge_firmwareall versions—
tp-link/omada_ds105ge_firmwareall versions—
tp-link/omada_ds1008x_firmwareall versions—
tp-link/omada_ds105x_firmwareall versions—
tp-link/omada_ds108g-m2_firmwareall versions—
tp-link/omada_ds105g-m2_firmwareall versions—
tp-link/omada_ds1024g_firmwareall versions—
tp-link/omada_ds1016g_firmwareall versions—
tp-link/omada_ds110gmp_firmwareall versions—
tp-link/omada_ds108g_firmwareall versions—
tp-link/omada_ds106gpp_firmwareall versions—
tp-link/omada_ds106p_firmwareall versions—
tp-link/omada_ds105g_firmwareall versions—
tp-link/omada_ds111p_firmwareall versions—
tp-link/omada_ds1018gmp_firmwareall versions—
tp-link/omada_ds108gp_firmwareall versions—
tp-link/omada_ds105gp_firmwareall versions—
tp-link/omada_ies210gpp_firmwareall versions—
tp-link/omada_ies206gpp_firmwareall versions—
tp-link/omada_ies208g_firmwareall versions—
tp-link/omada_ies206g_firmwareall versions—
tp-link/omada_eap660hd_firmwareall versions—
tp-link/omada_eap620hd_firmwareall versions—
tp-link/omada_eap610_firmwareall versions—
tp-link/omada_eap615-wall_firmwareall versions—
tp-link/omada_eap610-outdoor_firmwareall versions—
tp-link/omada_fusion_2.5g_firmwareall versions—
tp-link/omada_er707-m2_firmwareall versions—
References (3)
EPSS history
Timeline
  • 03 AUG 17:51Z
    Weak Credential Storage in TP-Link Omada Devices
    cvelistv5