CVE-2025-9290 - CVE House
Back to Database
Status published Medium CVE-2025-9290

Authentication Weakness on Omada Controllers, Gateways and Access Points

Vulnerability Description

An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values. Exploitation requires advanced network positioning and allows an attacker to intercept adoption traffic and forge valid authentication through offline precomputation, potentially exposing sensitive information and compromising confidentiality.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-9290

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Stanislav Dashevskyi and Francesco La Spina of Forescout Technologies

References

More from TP-Link Systems Inc.

View All →
CVE-2025-9961
Authenticated RCE by CWMP binary
High 8.6
CVE-2025-9522
Blind Server-Side Request Forgery (SSRF) in Omada Controller
Medium 5.1
CVE-2025-9521
Password Confirmation Bypass in Omada Controller
Low 2.1
CVE-2025-9520
IDOR Leading to Owner Account Hijacking in Omada Controller
High 8.3
CVE-2025-9377
Authenticated RCE via Parental Control command injection
High 8.6

Affected Vendor

TP-Link Systems Inc.

View all reports →

Affected Software

Omada Software Controller, Omada Cloud Controller, Omada Hardware Controller (OC200, OC300, OC400), Omada Hardware Controller OC220, Omada Gateway (ER605 v2.0), Omada Gateway (ER7206 v2.0), Omada Gateway (ER7406, ER706W, ER706-4G), Omada Gateway (ER707-M2, ER-8411), Omada Gateway (ER7412-M2, ER706WP-4G, ER703WP-4G-Outdoor, DR3220v-4G, DR3650v, DR3650v-4G), Omada Gateway (ER8411), Omada Gateway (ER706W-4G 2.0), Omada Gateway (ER701-5G-Outdoor), Omada Gateway (ER605W 2.0), Omada Gateway ER7212PC 2.0, Omada Festa Gateway FR365, Omada Gateway G36W-4G, Omada Access Point (EAP660 HD v1.0/v2.0, EAP620 HD v2.0/v3.0/v3.20, EAP610/EAP610-Outdoor v1.0/v2.0, EAP623-Outdoor HD v1.0, EAP625-Outdoor HD v1.0)EAP, Omada Access Point (EAP655-Wall v1.0), Omada Access Point (EAP772 v1.0, EAP773 v1.0, EAP783 v1.0, EAP787 v1.0, EAP720 v1.0, EAP725-Wall v1.0, EAp723 v2.0), Omada Access Point (EAP723 v1.0, EAP772 v2.0, EAP772-Outdoor v 1.0, EAP770 v2.0), Omada Access Point (EAP215 Bridge KIT 3.0, EAP211 Bridge KIT 3.0), Omada Beam Bridge 5 UR v1.0, Omada Access Point (EAP603GP-Desktop, EAP615GP-Wall 1.0/1.20, EAP625GP-Wall 1.0/1.20, EAP610GP-Desktop 1.0/1.20/1.26), EAP650-Desktop v1.0), Omada Access Point (EAP650GP-Desktop 1.0), Omada Access Point (EAP653 v1.0, EAP650-Outdoor v1.0), Omada Access Point (EAP230-Wall v1.0, EAP235-Wall v1.0), Omada Access Point (EAP603-Outdoor v1.0, EAP615-Wall v1.0/v1.20), Omada Access Point (EAP653 UR v1.0), Omada Access Point (EAP615-Wall v1.0/v1.20), Omada EAP100-Bridge KIT v1.0
Vulnerable Versions:
0

Timeline

Official Publish: January 22nd, 2026
Last Modified: January 23rd, 2026
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-760

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.