What’s Vulnerable › Products

TP-Link Omada ER605 vulnerabilities

15 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your TP-Link Omada ER605 version is affected

Latest TP-Link Omada ER605 vulnerabilities

• CVE-2025-15631 — Weak Credential Storage in TP-Link Omada Devices (CVSS 5.9)
• CVE-2025-15630 — Device Provisioning Race Condition in TP-Link Omada Adoption Workflow (CVSS 5.9)
• CVE-2025-15629 — Weak Session Key Generation in TP-Link Omada Adoption Protocol (CVSS 7.5)
• CVE-2025-15628 — Hardcoded Certificates in TP-Link Omada Device Communications (CVSS 7.5)
• CVE-2025-15627 — Hardcoded Cryptographic Keys in TP-Link Omada Adoption Protocol Authentication (CVSS 7.5)
• CVE-2025-15544 — Weak Credential Protection During TP-Link Omada Device Adoption (CVSS 5.9)
• CVE-2025-9291 — Improper Certificate Validation in TP-Link Omada Cloud Communications (CVSS 6.5)
• CVE-2024-5244 — TP-Link Omada ER605 Reliance on Security Through Obscurity Vulnerability (CVSS 4.2)
• CVE-2024-5243 — TP-Link Omada ER605 Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.5)
• CVE-2024-5242 — TP-Link Omada ER605 Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.5)
• CVE-2024-5228 — TP-Link Omada ER605 Comexe DDNS Response Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.5)
• CVE-2024-5227 — TP-Link Omada ER605 PPTP VPN username Command Injection Remote Code Execution Vulnerability (CVSS 7.5)
• CVE-2024-1180 — TP-Link Omada ER605 Access Control Command Injection Remote Code Execution Vulnerability (CVSS 8.0)
• CVE-2024-1179 — TP-Link Omada ER605 DHCPv6 Client Options Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2024-25139 — (CVSS 10.0)