What’s Vulnerable › Vulnerabilities
CVE-2025-15544: Weak Credential Protection During TP-Link Omada Device Adoption
- Severity: medium (CVSS 5.9 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-08-03 · updated 2026-09-29
- Weakness: CWE-759
Description
A cryptographic weakness exists in the Omada device adoption process. During adoption, authentication credentials associated with site management are transmitted using a weak hashing algorithm that does not provide sufficient protection. An attacker who successfully intercepts adoption-related authentication traffic may be able to recover valid credentials and gain unauthorized access to managed devices or controller-managed environments.
Affected products
- TP-Link Omada: all versions
- TP-Link Omada Ds1008X Firmware: all versions
- TP-Link Omada Ds1016G Firmware: all versions
- TP-Link Omada Ds1016Ge Firmware: all versions
- TP-Link Omada Ds1018Gmp Firmware: all versions
- TP-Link Omada Ds1024G Firmware: all versions
- TP-Link Omada Ds105G-M2 Firmware: all versions
- TP-Link Omada Ds105G Firmware: all versions
- TP-Link Omada Ds105Ge Firmware: all versions
- TP-Link Omada Ds105Gp Firmware: all versions
- TP-Link Omada Ds105X Firmware: all versions
- TP-Link Omada Ds106Gpp Firmware: all versions
- TP-Link Omada Ds106P Firmware: all versions
- TP-Link Omada Ds108G-M2 Firmware: all versions
- TP-Link Omada Ds108G Firmware: all versions
- TP-Link Omada Ds108Ge Firmware: all versions
- TP-Link Omada Ds108Gp Firmware: all versions
- TP-Link Omada Ds110Gmp Firmware: all versions
- TP-Link Omada Ds111P Firmware: all versions
- TP-Link Omada Eap610-Outdoor Firmware: all versions
- TP-Link Systems Inc. EAP610 v3: all versions
- TP-Link Omada Eap615-Wall Firmware: all versions
- TP-Link Omada Eap620Hd Firmware: all versions
- TP-Link Omada Eap660Hd Firmware: all versions
- TP-Link Omada ER605: all versions
- TP-Link Omada Er703Wp-4G-Outdoor Firmware: all versions
- TP-Link Omada Er706W-4G Firmware: all versions
- TP-Link Omada Er706W Firmware: all versions
- TP-Link Omada Er706Wp-4G Firmware: all versions
- TP-Link Omada Er707-M2 Firmware: all versions
References
- https://www.omadanetworks.com/en/support/download/
- https://www.omadanetworks.com/us/support/download/
- https://www.tp-link.com/us/support/faq/5216/
Get alerted when CVE-2025-15544 or the next vulnerability affects your stack