Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-15627

Hardcoded Cryptographic Keys in TP-Link Omada Adoption Protocol Authentication

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TPLink

Description

A cryptographic weakness exists in the Omada adoption protocol.  The protocol relies on hard-coded cryptographic keys to establish trust and protect authentication exchanges between controllers and managed devices during device adoption. An attacker may be able to impersonate trusted controllers or managed devices and gain access to sensitive adoption-related communications.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TP-Link Systems Inc. Omada Gateways

Default version status: unaffected

  • 0affected

TP-Link Systems Inc. Omada Switches

Default version status: unaffected

  • 0affected

TP Link Systems Inc. Omada Access Points

Default version status: unaffected

  • 0affected

TP-Link Systems Inc Omada Controllers

Default version status: unaffected

  • 0affected

References