SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityAnalyzed

CVE-2025-9290

An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values.

MEDIUM 6.0EPSS 0.20%

Does this matter?

Lower severity and a low EPSS score (0.20%). Track it; it rarely justifies an emergency change on its own.

Description

An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values. Exploitation requires advanced network positioning and allows an attacker to intercept adoption traffic and forge valid authentication through offline precomputation, potentially exposing sensitive information and compromising confidentiality.

CVSS 4.0
6.0 MEDIUMCVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS
0.20% probability · 10th percentile
CISA KEV
Not listed
Weakness
CWE-760
Affected
tp-link/omada controller · tp-link/oc200 firmware · tp-link/oc220 firmware · tp-link/oc300 firmware · tp-link/oc400 firmware · tp-link/er605 firmware · tp-link/er7206 firmware · tp-link/er7406 firmware · tp-link/er707-m2 firmware · tp-link/er7412-m2 firmware · tp-link/er8411 firmware · tp-link/er706w firmware · tp-link/er706w-4g firmware · tp-link/er706wp-4g firmware · tp-link/er703wp-4g-outdoor firmware · tp-link/dr3220v-4g firmware · tp-link/dr3650v-4g firmware · tp-link/dr3650v firmware · tp-link/er701-5g-outdoor firmware · tp-link/er605w firmware · +36 more
Source
f23511db-6c3e-4e32-a477-6aa17d310630

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.