← Database

CVE-2025-15627

HIGH CVSS: 7.5 Published: 2026-08-03 Modified: 2026-08-07

Description

A cryptographic weakness exists in the Omada adoption protocol.  The protocol relies on hard-coded cryptographic keys to establish trust and protect authentication exchanges between controllers and managed devices during device adoption. An attacker may be able to impersonate trusted controllers or managed devices and gain access to sensitive adoption-related communications.

Affected Platforms

Tp-Link Omada Sg2452LpTp-Link Omada Sg6654XhpTp-Link Omada S6500-48Mpp6YTp-Link Omada Sg3452PTp-Link Omada Sg3452P FirmwareTp-Link Omada Sg2428PTp-Link Omada Tl-Sg3210 FirmwareTp-Link Omada Ds105G-M2Tp-Link Omada Ies210Gpp FirmwareTp-Link Omada Sg3428

Weakness Type

CWE-321

References