Security Advisory catalog CVE-2025-9290 CVE-2025-9290 Published
Authentication Weakness on Omada Controllers, Gateways and Access Points
cve-program · CVE-2025-9290 Published Omada Software Controller Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada Software Controller",
"platforms": [
"Windows",
"Linux"
],
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "6.0.0.24",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Omada Cloud Controller Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada Cloud Controller",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "6.0.0.100",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Omada Hardware Controller (OC200, OC300, OC400) Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada Hardware Controller (OC200, OC300, OC400)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "6.0.0.34",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Omada Hardware Controller OC220 Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada Hardware Controller OC220",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "5.15.24",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Omada Gateway (ER605 v2.0) Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada Gateway (ER605 v2.0)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "2.3.2 Build 20251029 Rel.12727",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Omada Gateway (ER7206 v2.0) Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada Gateway (ER7206 v2.0)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "2.2.2 Build 20250724 Rel.11109",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Omada Gateway (ER7406, ER706W, ER706-4G) Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada Gateway (ER7406, ER706W, ER706-4G)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "1.2.x",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Omada Gateway (ER707-M2, ER-8411) Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada Gateway (ER707-M2, ER-8411)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "1.3.x",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Omada Gateway (ER7412-M2, ER706WP-4G, ER703WP-4G-Outdoor, DR3220v-4G, DR3650v, DR3650v-4G) Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada Gateway (ER7412-M2, ER706WP-4G, ER703WP-4G-Outdoor, DR3220v-4G, DR3650v, DR3650v-4G)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "1.1.0",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Omada Gateway (ER8411) Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada Gateway (ER8411)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "1.3.5 Build 20251028 Rel.06811",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Omada Gateway (ER706W-4G 2.0) Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada Gateway (ER706W-4G 2.0)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "2.1.0 Build 20250810 Rel.77020",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Omada Gateway (ER701-5G-Outdoor) Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada Gateway (ER701-5G-Outdoor)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "1.0.0 Build 20250826 Rel.68862",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Omada Gateway (ER605W 2.0) Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada Gateway (ER605W 2.0)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "2.0.2 Build 20250723 Rel.39048",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Omada Gateway ER7212PC 2.0 Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada Gateway ER7212PC 2.0",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "2.2.1 Build 20251027 Rel.75129",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Omada Festa Gateway FR365 Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada Festa Gateway FR365",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "1.1.10 Build 20250626 Rel.81746",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Omada Gateway G36W-4G Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada Gateway G36W-4G",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "1.1.5 Build 20250710 Rel.62142",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Omada Access Point (EAP660 HD v1.0/v2.0, EAP620 HD v2.0/v3.0/v3.20, EAP610/EAP610-Outdoor v1.0/v2.0, EAP623-Outdoor HD v1.0, EAP625-Outdoor HD v1.0)EAP Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada Access Point (EAP660 HD v1.0/v2.0, EAP620 HD v2.0/v3.0/v3.20, EAP610/EAP610-Outdoor v1.0/v2.0, EAP623-Outdoor HD v1.0, EAP625-Outdoor HD v1.0)EAP",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "1.6.1",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Omada Access Point (EAP655-Wall v1.0) Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada Access Point (EAP655-Wall v1.0)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "1.6.2 Build 20251107 Rel.35700",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Omada Access Point (EAP772 v1.0, EAP773 v1.0, EAP783 v1.0, EAP787 v1.0, EAP720 v1.0, EAP725-Wall v1.0, EAp723 v2.0) Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada Access Point (EAP772 v1.0, EAP773 v1.0, EAP783 v1.0, EAP787 v1.0, EAP720 v1.0, EAP725-Wall v1.0, EAp723 v2.0)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "1.1.2",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Omada Access Point (EAP723 v1.0, EAP772 v2.0, EAP772-Outdoor v 1.0, EAP770 v2.0) Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada Access Point (EAP723 v1.0, EAP772 v2.0, EAP772-Outdoor v 1.0, EAP770 v2.0)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "1.3.2 Build 20250901 Rel.52255",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Omada Access Point (EAP215 Bridge KIT 3.0, EAP211 Bridge KIT 3.0) Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada Access Point (EAP215 Bridge KIT 3.0, EAP211 Bridge KIT 3.0)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "1.1.4 Build 20251112 Rel.34769",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Omada Beam Bridge 5 UR v1.0 Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada Beam Bridge 5 UR v1.0",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "1.1.5 Build 20250928 Rel.68499",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Omada Access Point (EAP603GP-Desktop, EAP615GP-Wall 1.20, EAP625GP-Wall 1.0/1.20, EAP610GP-Desktop 1.0/1.20/1.26), EAP650-Desktop v1.0) Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada Access Point (EAP603GP-Desktop, EAP615GP-Wall 1.20, EAP625GP-Wall 1.0/1.20, EAP610GP-Desktop 1.0/1.20/1.26), EAP650-Desktop v1.0)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "1.1.0",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Omada Access Point (EAP650GP-Desktop 1.0) Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada Access Point (EAP650GP-Desktop 1.0)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "1.0.1 Build 20250819 Rel.60298",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Omada Access Point (EAP653 v1.0, EAP650-Outdoor v1.0) Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada Access Point (EAP653 v1.0, EAP650-Outdoor v1.0)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "1.3.3 Build 20251111 Rel.72627",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Omada Access Point (EAP230-Wall v1.0, EAP235-Wall v1.0) Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada Access Point (EAP230-Wall v1.0, EAP235-Wall v1.0)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "3.3.1 Build 20251203 Rel.58135",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Omada Access Point (EAP603-Outdoor v1.0, EAP615-Wall v1.0/v1.20) Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada Access Point (EAP603-Outdoor v1.0, EAP615-Wall v1.0/v1.20)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "1.5.1",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Omada Access Point (EAP653 UR v1.0) Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada Access Point (EAP653 UR v1.0)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "1.4.2 Build 20251208 Rel.43830",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Omada Access Point (EAP615-Wall v1.0/v1.20) Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada Access Point (EAP615-Wall v1.0/v1.20)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "1.5.10 Build 20250903 Rel.49784",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Omada EAP100-Bridge KIT v1.0 Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TP-Link Systems Inc.",
"product": "Omada EAP100-Bridge KIT v1.0",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "1.0.3 Build 20251015 Rel.62058",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
} Original source record · Cite this exact observation · Complete original publisher JSON