Description
A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation. An attacker who successfully intercepts adoption-related communications may be able to recover session encryption keys and decrypt affected communications.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
TP-Link Systems Inc. Omada Gateways
Default version status: unaffected
0affected
TP-Link Systems Inc. Omada Switches
Default version status: unaffected
0affected
TP Link Systems Inc. Omada Access Points
Default version status: unaffected
0affected
TP-Link Systems Inc Omada Controllers
Default version status: unaffected
0affected