CVE-2025-15544

Impact

A cryptographic weakness exists in the Omada device adoption process.  During adoption, authentication credentials associated with site management are transmitted using a weak hashing algorithm that does not provide sufficient protection. An attacker who successfully intercepts adoption-related authentication traffic may be able to recover valid credentials and gain unauthorized access to managed devices or controller-managed environments.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://www.omadanetworks.com/en/support/download/
• https://www.omadanetworks.com/us/support/download/
• https://www.tp-link.com/us/support/faq/5216/