Vulnerability Intelligence Report
Unauthorized root access via debug functionality
CVE-2025-7851
An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways.
No Active Exploit Signals
CVSS Base Score
8.7
HIGH
EPSS Probability:0.61%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-269 ↗CWE-269 Improper Privilege Management
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| TP-Link Systems Inc. | Omada gateways | 0 < ER8411 1.3.3, ER7412-M2 1.1.0, ER707-M2 1.3.1, ER7206 2.2.2, ER605 2.3.1, ER706W 1.2.1, ER706W-4G 1.2.1, ER7212PC 2.1.3 (affected) |
| TP-Link Systems Inc. | Festa gateways | 0 < FR365 1.1.10, FR205 1.0.3, FR307 1.2.5 (affected) |
| TP-Link Systems Inc. | Omada Pro gateways | 0 < G36 1.1.4, G611 1.2.2 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.615%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | TP-Link Systems Inc. · Vendor · USA |
| Reserved | 2025-07-18T21:49:12 |
| Published | 2025-10-21T00:29:05 |
| Last Updated | 2025-10-24T17:00:06 |
Community Chatter & Buzz