CVE-2025-15629

Katalog CVE

CVSS 7.5 · High EPSS 0,33%

Kerentanan Insufficient Entropy pada tp-link omada oc200 v3 firmware, tp-link omada oc300 firmware +58 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation. An attacker who successfully intercepts adoption-related communications may be able to recover session encryption keys and decrypt affected communications.

Rincian

Terbit di NVD

3 Agustus 2026

Terakhir diubah

29 September 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-331: Insufficient Entropy

EPSS (30 hari)

0,33% peluang dieksploitasi; lebih tinggi dari 24,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 112 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://www.tp-link.com/us/support/faq/5216/ advisory vendor
• https://www.omadanetworks.com/en/support/download/ product
• https://www.omadanetworks.com/us/support/download/ product