CVE-2025-15544EPSS p25.6%
CVE-2025-15544CVE-2025-15544
tp-link / omada_oc200_v3_firmware
Description
A cryptographic
weakness exists in the Omada device adoption process. During adoption, authentication credentials associated
with site management are transmitted using a weak hashing algorithm that does
not provide sufficient protection.
An attacker who
successfully intercepts adoption-related authentication traffic may be able to
recover valid credentials and gain unauthorized access to managed devices or
controller-managed environments.
Scoring
| CVSS | 5.9 () |
| Vector | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |
| EPSS | 0.34% probability of exploitation · percentile 25.6% · 2026-10-06T12:00:23Z |
| Last modified | 2026-09-29 |