VulnerabilityAnalyzed

CVE-2025-7375

A denial-of-service (DoS) vulnerability was identified in Omada EAP610 v3.

MEDIUM 6.9EPSS 0.22%

Does this matter?

Lower severity and a low EPSS score (0.22%). Track it; it rarely justifies an emergency change on its own.

Description

A denial-of-service (DoS) vulnerability was identified in Omada EAP610 v3. An attacker with adjacent network access can send crafted requests to cause the device’s HTTP service to crash. This results in temporary service unavailability until the device is rebooted. This issue affects Omada EAP610 firmware versions prior to 1.6.0.

CVSS 4.0: 6.9 MEDIUMCVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.22% probability · 12th percentile
CISA KEV: Not listed
Weakness: CWE-20
Affected: tp-link/omada eap610 firmware
Source: f23511db-6c3e-4e32-a477-6aa17d310630

References

https://support.omadanetworks.com/en/product/eap610/v3/Product
https://support.omadanetworks.com/us/document/118100/Vendor Advisory
https://support.omadanetworks.com/us/product/eap610/v3/Product

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.