← Database
CVE-2025-15628
HIGH
CVSS: 7.5
Published: 2026-08-03
Modified: 2026-08-07
Description
Affected
Omada devices rely on embedded certificates that are shared across deployments
to establish trust between controllers and managed devices.
An attacker
who obtains the embedded certificates may be able to impersonate trusted
controllers or devices and intercept affected communications.
Affected Platforms
Tp-Link Omada Sg2452LpTp-Link Omada Sg6654XhpTp-Link Omada S6500-48Mpp6YTp-Link Omada Sg3452PTp-Link Omada Sg3452P FirmwareTp-Link Omada Sg2428PTp-Link Omada Tl-Sg3210 FirmwareTp-Link Omada Ds105G-M2Tp-Link Omada Ies210Gpp FirmwareTp-Link Omada Sg3428