What’s Vulnerable › Vulnerabilities
CVE-2025-15627: Hardcoded Cryptographic Keys in TP-Link Omada Adoption Protocol Authentication
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.7% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-08-03 · updated 2026-09-29
- Weakness: CWE-321
Description
A cryptographic weakness exists in the Omada adoption protocol. The protocol relies on hard-coded cryptographic keys to establish trust and protect authentication exchanges between controllers and managed devices during device adoption. An attacker may be able to impersonate trusted controllers or managed devices and gain access to sensitive adoption-related communications.
Affected products
- TP-Link Omada Ds1008X Firmware: all versions
- TP-Link Omada Ds1016G Firmware: all versions
- TP-Link Omada Ds1016Ge Firmware: all versions
- TP-Link Omada Ds1018Gmp Firmware: all versions
- TP-Link Omada Ds1024G Firmware: all versions
- TP-Link Omada Ds105G-M2 Firmware: all versions
- TP-Link Omada Ds105G Firmware: all versions
- TP-Link Omada Ds105Ge Firmware: all versions
- TP-Link Omada Ds105Gp Firmware: all versions
- TP-Link Omada Ds105X Firmware: all versions
- TP-Link Omada Ds106Gpp Firmware: all versions
- TP-Link Omada Ds106P Firmware: all versions
- TP-Link Omada Ds108G-M2 Firmware: all versions
- TP-Link Omada Ds108G Firmware: all versions
- TP-Link Omada Ds108Ge Firmware: all versions
- TP-Link Omada Ds108Gp Firmware: all versions
- TP-Link Omada Ds110Gmp Firmware: all versions
- TP-Link Omada Ds111P Firmware: all versions
- TP-Link Omada Eap610-Outdoor Firmware: all versions
- TP-Link Systems Inc. EAP610 v3: all versions
- TP-Link Omada Eap615-Wall Firmware: all versions
- TP-Link Omada Eap620Hd Firmware: all versions
- TP-Link Omada Eap660Hd Firmware: all versions
- TP-Link Omada ER605: all versions
- TP-Link Omada Er703Wp-4G-Outdoor Firmware: all versions
- TP-Link Omada Er706W-4G Firmware: all versions
- TP-Link Omada Er706W Firmware: all versions
- TP-Link Omada Er706Wp-4G Firmware: all versions
- TP-Link Omada Er707-M2 Firmware: all versions
- TP-Link Omada Er7206 Firmware: all versions
References
- https://www.omadanetworks.com/en/support/download/
- https://www.omadanetworks.com/us/support/download/
- https://www.tp-link.com/us/support/faq/5216/
Get alerted when CVE-2025-15627 or the next vulnerability affects your stack