Back to CVE records
Medium 6.9Published Aug 3, 2026
CVE-2025-15627Hardcoded Cryptographic Keys in TP-Link Omada Adoption Protocol Authentication
Updated under an hour ago ()
Does this affect you?
It affects TP-Link Systems Inc. Omada Gateways and 59 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
A cryptographic weakness exists in the Omada adoption protocol. The protocol relies on hard-coded cryptographic keys to establish trust and protect authentication exchanges between controllers and managed devices during device adoption. An attacker may be able to impersonate trusted controllers or managed devices and gain access to sensitive adoption-related communications.
- CVSS
- 6.9 MEDIUM (v4.0, CNA)CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
- Weakness (CWE)
- CWE-321
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- TPLink
- NVD analysis
- Analyzed
- Record last updated
- Aug 3, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
TP-Link Systems Inc. Omada Gateways tp_link_systems:omada_gateways (from the name) | 0 | CNA record |
TP-Link Systems Inc. Omada Switches tp_link_systems:omada_switches (from the name) | 0 | CNA record |
TP Link Systems Inc. Omada Access Points tp_link_systems:omada_access_points (from the name) | 0 | CNA record |
TP-Link Systems Inc Omada Controllers tp_link_systems:omada_controllers (from the name) | 0 | CNA record |
tp-link omada_oc200_v3_firmware tp-link:omada_oc200_v3_firmware | all versions | NVD |
tp-link omada_oc300_firmware tp-link:omada_oc300_firmware | all versions | NVD |
tp-link omada_oc400_firmware tp-link:omada_oc400_firmware | all versions | NVD |
tp-link omada_fusion_2.5g_firmware tp-link:omada_fusion_2.5g_firmware | all versions | NVD |
tp-link omada_er707-m2_firmware tp-link:omada_er707-m2_firmware | all versions | NVD |
tp-link omada_tl-sg3452x_firmware tp-link:omada_tl-sg3452x_firmware | all versions | NVD |
tp-link omada_sg3428xmpp_firmware tp-link:omada_sg3428xmpp_firmware | all versions | NVD |
tp-link omada_sg3428xmp_firmware tp-link:omada_sg3428xmp_firmware | all versions | NVD |
tp-link omada_sg3428x_firmware tp-link:omada_sg3428x_firmware | all versions | NVD |
tp-link omada_sg2005p-pd_firmware tp-link:omada_sg2005p-pd_firmware | all versions | NVD |
tp-link omada_sg3452p_firmware tp-link:omada_sg3452p_firmware | all versions | NVD |
tp-link omada_sg3452_firmware tp-link:omada_sg3452_firmware | all versions | NVD |
tp-link omada_sg3428mp_firmware tp-link:omada_sg3428mp_firmware | all versions | NVD |
tp-link omada_sg3428_firmware tp-link:omada_sg3428_firmware | all versions | NVD |
tp-link omada_sg3210_firmware tp-link:omada_sg3210_firmware | all versions | NVD |
tp-link omada_tl-sg3210_firmware tp-link:omada_tl-sg3210_firmware | all versions | NVD |
tp-link omada_sg2452lp_firmware tp-link:omada_sg2452lp_firmware | all versions | NVD |
tp-link omada_sg2428p_firmware tp-link:omada_sg2428p_firmware | all versions | NVD |
tp-link omada_sg2428lp_firmware tp-link:omada_sg2428lp_firmware | all versions | NVD |
tp-link omada_sg2218p_firmware tp-link:omada_sg2218p_firmware | all versions | NVD |
tp-link omada_sg2218_firmware tp-link:omada_sg2218_firmware | all versions | NVD |
tp-link omada_sg2016p_firmware tp-link:omada_sg2016p_firmware | all versions | NVD |
tp-link omada_sg2210mp_firmware tp-link:omada_sg2210mp_firmware | all versions | NVD |
tp-link omada_sg2210p_firmware tp-link:omada_sg2210p_firmware | all versions | NVD |
tp-link omada_sg2008p_firmware tp-link:omada_sg2008p_firmware | all versions | NVD |
tp-link omada_sg2008_firmware tp-link:omada_sg2008_firmware | all versions | NVD |
tp-link omada_sg2206mp_firmware tp-link:omada_sg2206mp_firmware | all versions | NVD |
tp-link omada_es210xpp-m2_firmware tp-link:omada_es210xpp-m2_firmware | all versions | NVD |
tp-link omada_es210x-m2_firmware tp-link:omada_es210x-m2_firmware | all versions | NVD |
tp-link omada_es206xpp-m2_firmware tp-link:omada_es206xpp-m2_firmware | all versions | NVD |
tp-link omada_es206x-m2_firmware tp-link:omada_es206x-m2_firmware | all versions | NVD |
tp-link omada_es228gmp_firmware tp-link:omada_es228gmp_firmware | all versions | NVD |
tp-link omada_es228gp_firmware tp-link:omada_es228gp_firmware | all versions | NVD |
tp-link omada_es224g_firmware tp-link:omada_es224g_firmware | all versions | NVD |
tp-link omada_es220gp_firmware tp-link:omada_es220gp_firmware | all versions | NVD |
tp-link omada_es216g_firmware tp-link:omada_es216g_firmware | all versions | NVD |
tp-link omada_es210gmp_firmware tp-link:omada_es210gmp_firmware | all versions | NVD |
tp-link omada_es210gp_firmware tp-link:omada_es210gp_firmware | all versions | NVD |
tp-link omada_es208gp_firmware tp-link:omada_es208gp_firmware | all versions | NVD |
tp-link omada_es208g_firmware tp-link:omada_es208g_firmware | all versions | NVD |
tp-link omada_es206gp_firmware tp-link:omada_es206gp_firmware | all versions | NVD |
tp-link omada_es205gp_firmware tp-link:omada_es205gp_firmware | all versions | NVD |
tp-link omada_es205g_firmware tp-link:omada_es205g_firmware | all versions | NVD |
tp-link omada_es220gmp_firmware tp-link:omada_es220gmp_firmware | all versions | NVD |
tp-link omada_es1024ge_firmware tp-link:omada_es1024ge_firmware | all versions | NVD |
tp-link omada_ds1016ge_firmware tp-link:omada_ds1016ge_firmware | all versions | NVD |
tp-link omada_ds108ge_firmware tp-link:omada_ds108ge_firmware | all versions | NVD |
tp-link omada_ds105ge_firmware tp-link:omada_ds105ge_firmware | all versions | NVD |
tp-link omada_ds1008x_firmware tp-link:omada_ds1008x_firmware | all versions | NVD |
tp-link omada_ds105x_firmware tp-link:omada_ds105x_firmware | all versions | NVD |
tp-link omada_ds108g-m2_firmware tp-link:omada_ds108g-m2_firmware | all versions | NVD |
tp-link omada_ds105g-m2_firmware tp-link:omada_ds105g-m2_firmware | all versions | NVD |
tp-link omada_ds1024g_firmware tp-link:omada_ds1024g_firmware | all versions | NVD |
tp-link omada_ds1016g_firmware tp-link:omada_ds1016g_firmware | all versions | NVD |
tp-link omada_ds110gmp_firmware tp-link:omada_ds110gmp_firmware | all versions | NVD |
tp-link omada_ds108g_firmware tp-link:omada_ds108g_firmware | all versions | NVD |
References
- https://www.omadanetworks.com/us/support/download/patch, product
- https://www.omadanetworks.com/en/support/download/patch, product
- https://www.tp-link.com/us/support/faq/5216/vendor-advisory
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.