{"id":"CVE-2025-7375","state":"PUBLISHED","title":"Unauthenticated Denial-of-Service Vulnerability in Omada EAP610","description":"A denial-of-service (DoS) vulnerability was identified in Omada EAP610 v3.  An attacker with adjacent network access can send crafted requests to cause the device’s HTTP service to crash.  This results in temporary service unavailability until the device is rebooted.\nThis issue affects Omada EAP610 firmware versions prior to 1.6.0.","publishedAt":"2026-03-05T17:47:56.583Z","updatedAt":"2026-03-06T16:11:17.670Z","severity":{"score":6.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","source":"TPLink"},"assigner":"TPLink","products":["TP-Link Systems Inc. EAP610 v3"],"affected":[{"vendor":"TP-Link Systems Inc.","product":"EAP610 v3","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.6.0","versionType":"custom"}]}],"references":["https://support.omadanetworks.com/en/product/eap610/v3/","https://support.omadanetworks.com/us/product/eap610/v3/","https://support.omadanetworks.com/us/document/118100/"],"weaknesses":["CWE-20"],"ingestedAt":"2026-10-29T20:10:04.440Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/7xxx/CVE-2025-7375.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-7375","state":"PUBLISHED","datePublished":"2026-03-05T17:47:56.583Z","dateUpdated":"2026-03-06T16:11:17.670Z","assignerShortName":"TPLink","assignerOrgId":"f23511db-6c3e-4e32-a477-6aa17d310630","dateReserved":"2025-07-09T00:57:53.077Z"},"containers":{"cna":{"title":"Unauthenticated Denial-of-Service Vulnerability in Omada EAP610","descriptions":[{"lang":"en","value":"A denial-of-service (DoS) vulnerability was identified in Omada EAP610 v3.  An attacker with adjacent network access can send crafted requests to cause the device’s HTTP service to crash.  This results in temporary service unavailability until the device is rebooted.\nThis issue affects Omada EAP610 firmware versions prior to 1.6.0."}],"affected":[{"vendor":"TP-Link Systems Inc.","product":"EAP610 v3","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.6.0","versionType":"custom"}]}],"references":[{"url":"https://support.omadanetworks.com/en/product/eap610/v3/","tags":["patch"]},{"url":"https://support.omadanetworks.com/us/product/eap610/v3/","tags":["patch"]},{"url":"https://support.omadanetworks.com/us/document/118100/","tags":["vendor-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"ADJACENT","baseScore":6.9,"baseSeverity":"MEDIUM","exploitMaturity":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-20","description":"CWE-20 Improper Input Validation","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"TPLink","orgId":"f23511db-6c3e-4e32-a477-6aa17d310630","dateUpdated":"2026-03-05T17:47:56.583Z"},"credits":[{"lang":"en","type":"finder","value":"Felix Thümmler"}],"impacts":[{"capecId":"CAPEC-6","descriptions":[{"lang":"en","value":"CAPEC-6 Argument Injection"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.5.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-03-06T15:50:51.854510Z","id":"CVE-2025-7375","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-03-06T16:11:17.670Z"}}]}}}