CVE-2025-9290
What it is
An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values. Exploitation requires advanced network positioning and allows an attacker to intercept adoption traffic and forge valid authentication through offline precomputation, potentially exposing sensitive information and compromising confidentiality.
At a glance
- Exploitability
- Can be exploited from the same network segment without logging in. High risk of data exposure.
- Exploit odds
- 0.2% chance of exploitation in the next 30 days (EPSS).
- Fix
- A patch, advisory or fixed version is referenced. Upgrade or apply it.
Timeline
- PublishedDisclosed publicly on CVE.org and NVD
- Last updatedMost recent change to the record
Details
- Published
- Last modified
- Exploit probability
- 0.2% · EPSS, next 30 days
- Weakness
- CWE-760
- Record status
- Analyzed
Affected
- TP-Link Omada Controller < 6.0.0.24
- TP-Link Omada Controller < 6.0.0.100
- TP-Link oc200 Firmware < 1.37.9
- TP-Link oc220 Firmware < 1.1.3
- TP-Link oc300 Firmware < 1.31.9
- TP-Link oc400 Firmware < 1.9.9
- TP-Link oc200 Firmware < 2.22.9
- TP-Link oc220 Firmware
Attack profile CVSS 4.0 · 6.0
- Attack vector
- Adjacent network
- Complexity
- High
- Attack requirements
- None
- Privileges needed
- None
- User interaction
- None
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Raw vector
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
