NetSight
high7.5

CVE-2025-15627

A cryptographic weakness exists in the Omada adoption protocol.

Impact

A cryptographic weakness exists in the Omada adoption protocol.  The protocol relies on hard-coded cryptographic keys to establish trust and protect authentication exchanges between controllers and managed devices during device adoption. An attacker may be able to impersonate trusted controllers or managed devices and gain access to sensitive adoption-related communications.

Affected products

VendorProductAffected versions
Tp-LinkOmada Oc200 V3 Firmware
All versions
Tp-LinkOmada Oc300 Firmware
All versions
Tp-LinkOmada Oc400 Firmware
All versions
Tp-LinkOmada Fusion 2.5g Firmware
All versions
Tp-LinkOmada Er707-M2 Firmware
All versions
Tp-LinkOmada Tl-Sg3452x Firmware
All versions
Tp-LinkOmada Sg3428xmpp Firmware
All versions
Tp-LinkOmada Sg3428xmp Firmware
All versions
Tp-LinkOmada Sg3428x Firmware
All versions
Tp-LinkOmada Sg2005p-Pd Firmware
All versions
Tp-LinkOmada Sg3452p Firmware
All versions
Tp-LinkOmada Sg3452 Firmware
All versions

Weakness classification

References