CVE-2025-15631

Katalog CVE

CVSS 5.9 · Medium EPSS 0,30%

Kerentanan Use of a One-Way Hash without a Salt pada tp-link omada fusion 2.5g firmware, tp-link omada er707-m2 firmware +58 lainnya. Skor CVSS 3.1 5.9 (Medium) menurut NVD.

Deskripsi (NVD)

A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing algorithm that does not provide sufficient protection. An attacker who obtains access to stored credential data may be able to recover valid credentials to gain unauthorized access to affected devices or management environments.

Rincian

Terbit di NVD

3 Agustus 2026

Terakhir diubah

29 September 2026

Status NVD

Analyzed

CVSS 3.1

5.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-759: Use of a One-Way Hash without a Salt

EPSS (30 hari)

0,30% peluang dieksploitasi; lebih tinggi dari 21,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 109 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://www.tp-link.com/us/support/faq/5216/ advisory vendor
• https://www.omadanetworks.com/en/support/download/ product
• https://www.omadanetworks.com/us/support/download/ product