high7.2
CVE-2025-7850
A command injection vulnerability may be exploited after the admin's authentication on the web portal on Omada gateways.
Impact
A command injection vulnerability may be exploited after the admin's authentication on the web portal on Omada gateways.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tp-Link | Er8411 Firmware | before 1.3.3 Version 1.3.3 |
| Tp-Link | Er7412-M2 Firmware | before 1.1.0 Version 1.1.0 |
| Tp-Link | Er707-M2 Firmware | before 1.3.1 Version 1.3.1 |
| Tp-Link | Er7206 Firmware | before 2.2.2 Version 2.2.2 |
| Tp-Link | Er605 Firmware | before 2.3.1 Version 2.3.1 |
| Tp-Link | Er706w Firmware | before 1.2.1 Version 1.2.1 |
| Tp-Link | Er706w-4g Firmware | before 1.2.1 Version 1.2.1 |
| Tp-Link | Er7212pc Firmware | before 2.1.3 Version 2.1.3 |
| Tp-Link | G36 Firmware | before 1.1.4 Version 1.1.4 |
| Tp-Link | G611 Firmware | before 1.2.2 Version 1.2.2 |
| Tp-Link | Fr365 Firmware | before 1.1.10 Version 1.1.10 |
| Tp-Link | Fr205 Firmware | before 1.0.3 Version 1.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://support.omadanetworks.com/en/document/108456/
- https://www.forescout.com/blog/new-tp-link-router-vulnerabilities-a-primer-on-rooting-routers/
- https://www.omadanetworks.com/us/business-networking/all-omada-router/
- https://www.omadanetworks.com/us/business-networking/omada-pro-router-wired-router/
- https://www.tp-link.com/us/business-networking/soho-festa-gateway/