NetSight
medium5.9

CVE-2025-15631

A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing algorithm that does not provide sufficien…

Impact

A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing algorithm that does not provide sufficient protection. An attacker who obtains access to stored credential data may be able to recover valid credentials to gain unauthorized access to affected devices or management environments.

Affected products

VendorProductAffected versions
Tp-LinkOmada Fusion 2.5g Firmware
All versions
Tp-LinkOmada Er707-M2 Firmware
All versions
Tp-LinkOmada Er7206 Firmware
All versions
Tp-LinkOmada Er706w Firmware
All versions
Tp-LinkOmada Er8411 Firmware
All versions
Tp-LinkOmada Er605 Firmware
All versions
Tp-LinkOmada Er7412-M2 Firmware
All versions
Tp-LinkOmada Er706w-4g Firmware
All versions
Tp-LinkOmada Er703wp-4g-Outdoor Firmware
All versions
Tp-LinkOmada Er706wp-4g Firmware
All versions
Tp-LinkOmada S7500-24y4c Firmware
All versions
Tp-LinkOmada S7500-26xf6y Firmware
All versions

Weakness classification

References