CVE-2025-9290

Katalog CVE

CVSS 5.9 · Medium EPSS 0,22%

Kerentanan Use of a One-Way Hash with a Predictable Salt pada tp-link omada controller, tp-link oc200 firmware +53 lainnya. Skor CVSS 3.1 5.9 (Medium) menurut NVD.

Deskripsi (NVD)

An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values. Exploitation requires advanced network positioning and allows an attacker to intercept adoption traffic and forge valid authentication through offline precomputation, potentially exposing sensitive information and compromising confidentiality.

Rincian

Terbit di NVD

23 Januari 2026

Terakhir diubah

7 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

5.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-760: Use of a One-Way Hash with a Predictable Salt

EPSS (30 hari)

0,22% peluang dieksploitasi; lebih tinggi dari 12,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 64 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://support.omadanetworks.com/us/document/114950/ advisory vendor
• https://support.omadanetworks.com/en/download/ product
• https://support.omadanetworks.com/us/download/ product