CVE-2025-15628EPSS p22.8%
CVE-2025-15628CVE-2025-15628
tp-link / omada_oc200_v3_firmware
Description
Affected
Omada devices rely on embedded certificates that are shared across deployments
to establish trust between controllers and managed devices.
An attacker
who obtains the embedded certificates may be able to impersonate trusted
controllers or devices and intercept affected communications.
Scoring
| CVSS | 7.5 () |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| EPSS | 0.32% probability of exploitation · percentile 22.8% · 2026-10-05T12:00:23Z |
| Last modified | 2026-09-29 |