critical9.8
CVE-2025-7851
An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways.
Impact
An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tp-Link | Fr307-M2 Firmware | before 1.2.5 Version 1.2.5 |
| Tp-Link | Fr205 Firmware | before 1.0.3 Version 1.0.3 |
| Tp-Link | Fr365 Firmware | before 1.1.10 Version 1.1.10 |
| Tp-Link | G611 Firmware | before 1.2.2 Version 1.2.2 |
| Tp-Link | G36 Firmware | before 1.1.4 Version 1.1.4 |
| Tp-Link | Er7212pc Firmware | before 2.1.3 Version 2.1.3 |
| Tp-Link | Er706w-4g Firmware | before 1.2.1 Version 1.2.1 |
| Tp-Link | Er706w Firmware | before 1.2.1 Version 1.2.1 |
| Tp-Link | Er605 Firmware | before 2.3.1 Version 2.3.1 |
| Tp-Link | Er7206 Firmware | before 2.2.2 Version 2.2.2 |
| Tp-Link | Er707-M2 Firmware | before 1.3.1 Version 1.3.1 |
| Tp-Link | Er7412-M2 Firmware | before 1.1.0 Version 1.1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://support.omadanetworks.com/en/document/108456/
- https://www.forescout.com/blog/new-tp-link-router-vulnerabilities-a-primer-on-rooting-routers/
- https://www.omadanetworks.com/us/business-networking/all-omada-router/
- https://www.omadanetworks.com/us/business-networking/omada-pro-router-wired-router/
- https://www.tp-link.com/us/business-networking/soho-festa-gateway/