Critical · published October 21, 2025
🚨 A hidden door to the root shell might just be a misstep away on your Omada gateways! 🔥 Think of it like a hotel room key that accidentally opens the staff-only area, giving a guest unsupervised access to everything behind the scenes. An attacker could step through this loophole and manipulate the core system. If an attacker gains root shell access, they could control the entire operating system, potentially leading to data breaches, network disruptions, and unauthorized changes. This isn't just a minor inconvenience; it could result in a full compromise of your network's security!
Think of it like a hotel room key that accidentally opens the staff-only area, giving a guest unsupervised access to everything behind the scenes. An attacker could step through this loophole and manipulate the core system. CVE-2025-7851 arises when restricted conditions on Omada gateways inadvertently allow an attacker to escalate privileges to gain root shell access on the underlying operating system.
If an attacker gains root shell access, they could control the entire operating system, potentially leading to data breaches, network disruptions, and unauthorized changes. This isn't just a minor inconvenience; it could result in a full compromise of your network's security! To protect against this vulnerability, immediately update your Omada gateways to the latest version. Regularly audit your gateway configurations and apply any patches provided by the vendor as they become available. Additionally, consider implementing stricter access controls to limit exposure. You've got this! By taking these steps, you’ll secure your Omada gateways and keep your systems safe. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| tp-link/fr307-m2_firmware | < 1.2.5 | 1.2.5 |
| tp-link/fr307-m2_firmware | all versions | — |
| tp-link/fr205_firmware | < 1.0.3 | 1.0.3 |
| tp-link/fr205_firmware | all versions | — |
| tp-link/fr365_firmware | < 1.1.10 | 1.1.10 |
| tp-link/fr365_firmware | all versions | — |
| tp-link/g611_firmware | < 1.2.2 | 1.2.2 |
| tp-link/g611_firmware | all versions | — |
| tp-link/g36_firmware | < 1.1.4 | 1.1.4 |
| tp-link/g36_firmware | all versions | — |
| tp-link/er7212pc_firmware | < 2.1.3 | 2.1.3 |
| tp-link/er7212pc_firmware | all versions | — |
| tp-link/er706w-4g_firmware | < 1.2.1 | 1.2.1 |
| tp-link/er706w-4g_firmware | all versions | — |
| tp-link/er706w_firmware | < 1.2.1 | 1.2.1 |
| tp-link/er706w_firmware | all versions | — |
| tp-link/er605_firmware | < 2.3.1 | 2.3.1 |
| tp-link/er605_firmware | all versions | — |
| tp-link/er7206_firmware | < 2.2.2 | 2.2.2 |
| tp-link/er7206_firmware | all versions | — |
| tp-link/er707-m2_firmware | < 1.3.1 | 1.3.1 |
| tp-link/er707-m2_firmware | all versions | — |
| tp-link/er7412-m2_firmware | < 1.1.0 | 1.1.0 |
| tp-link/er7412-m2_firmware | all versions | — |
| tp-link/er8411_firmware | < 1.3.3 | 1.3.3 |
| tp-link/er8411_firmware | all versions | — |