← Back to CVE List
Vulnerability Intelligence Report
Weak Credential Protection During TP-Link Omada Device Adoption

CVE-2025-15544

A cryptographic weakness exists in the Omada device adoption process.  During adoption, authentication credentials associated with site management are transmitted using a weak hashing algorithm that does not provide sufficient protection. An attacker who successfully intercepts adoption-related authentication traffic may be able to recover valid credentials and gain unauthorized access to managed devices or controller-managed environments.

No Active Exploit Signals
CVSS Base Score
6.9
MEDIUM
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
Authentication
Weaponization
SSVC Action

Weaknesses (CWE)

CWE-759 ↗CWE-759 Use of a One-Way hash without a salt

Affected Products & Versions

Vendor Product Affected Versions
TP-Link Systems Inc. Omada Gateways 0 (affected)
TP-Link Systems Inc. Omada Switches 0 (affected)
TP Link Systems Inc. Omada Access Points 0 (affected)
TP-Link Systems Inc. Omada App 0 (affected)
TP-Link Systems Inc Omada Controllers 0 (affected)
TP-Link Systems Inc Omada OLTs 0 (affected)

References & Technical Advisories

No reference links found.

Threat Intelligence Signals

Identity & Timeline

StatusPUBLISHED
Assigning AuthorityTP-Link Systems Inc. · Vendor · USA
Reserved2026-01-20T21:50:47
Published2026-08-03T17:49:13
Last Updated2026-08-03T18:35:36

LINK COPIED TO CLIPBOARD