What’s Vulnerable › Vulnerabilities
CVE-2025-15629: Weak Session Key Generation in TP-Link Omada Adoption Protocol
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-08-03 · updated 2026-09-29
- Weakness: CWE-331
Description
A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation. An attacker who successfully intercepts adoption-related communications may be able to recover session encryption keys and decrypt affected communications.
Affected products
- TP-Link Omada Ds1008X Firmware: all versions
- TP-Link Omada Ds1016G Firmware: all versions
- TP-Link Omada Ds1016Ge Firmware: all versions
- TP-Link Omada Ds1018Gmp Firmware: all versions
- TP-Link Omada Ds1024G Firmware: all versions
- TP-Link Omada Ds105G-M2 Firmware: all versions
- TP-Link Omada Ds105G Firmware: all versions
- TP-Link Omada Ds105Ge Firmware: all versions
- TP-Link Omada Ds105Gp Firmware: all versions
- TP-Link Omada Ds105X Firmware: all versions
- TP-Link Omada Ds106Gpp Firmware: all versions
- TP-Link Omada Ds106P Firmware: all versions
- TP-Link Omada Ds108G-M2 Firmware: all versions
- TP-Link Omada Ds108G Firmware: all versions
- TP-Link Omada Ds108Ge Firmware: all versions
- TP-Link Omada Ds108Gp Firmware: all versions
- TP-Link Omada Ds110Gmp Firmware: all versions
- TP-Link Omada Ds111P Firmware: all versions
- TP-Link Omada Eap610-Outdoor Firmware: all versions
- TP-Link Systems Inc. EAP610 v3: all versions
- TP-Link Omada Eap615-Wall Firmware: all versions
- TP-Link Omada Eap620Hd Firmware: all versions
- TP-Link Omada Eap660Hd Firmware: all versions
- TP-Link Omada ER605: all versions
- TP-Link Omada Er703Wp-4G-Outdoor Firmware: all versions
- TP-Link Omada Er706W-4G Firmware: all versions
- TP-Link Omada Er706W Firmware: all versions
- TP-Link Omada Er706Wp-4G Firmware: all versions
- TP-Link Omada Er707-M2 Firmware: all versions
- TP-Link Omada Er7206 Firmware: all versions
References
- https://www.omadanetworks.com/en/support/download/
- https://www.omadanetworks.com/us/support/download/
- https://www.tp-link.com/us/support/faq/5216/
Get alerted when CVE-2025-15629 or the next vulnerability affects your stack