1. Home
  2. CVE Database
  3. CVE-2025-15628
HIGH · 7.5

CVE-2025-15628

Affected Omada devices rely on embedded certificates that are shared across deployments to establish trust between controllers and managed devices. An attacker who obtains the embedded certif...

Vulnerability Description

Affected Omada devices rely on embedded certificates that are shared across deployments to establish trust between controllers and managed devices. An attacker who obtains the embedded certificates may be able to impersonate trusted controllers or devices and intercept affected communications.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
Tp-LinkOmada Oc200 V3 Firmware-
Tp-LinkOmada Oc200 V3-
Tp-LinkOmada Oc300 Firmware-
Tp-LinkOmada Oc300-
Tp-LinkOmada Oc400 Firmware-
Tp-LinkOmada Oc400-
Tp-LinkOmada Fusion 2.5G Firmware-
Tp-LinkOmada Fusion 2.5G-
Tp-LinkOmada Er707-M2 Firmware-
Tp-LinkOmada Er707-M2-
Tp-LinkOmada Tl-Sg3452X Firmware-
Tp-LinkOmada Tl-Sg3452X-
Tp-LinkOmada Sg3428Xmpp Firmware-
Tp-LinkOmada Sg3428Xmpp-
Tp-LinkOmada Sg3428Xmp Firmware-
Tp-LinkOmada Sg3428Xmp-
Tp-LinkOmada Sg3428X Firmware-
Tp-LinkOmada Sg3428X-
Tp-LinkOmada Sg2005P-Pd Firmware-
Tp-LinkOmada Sg2005P-Pd-

Related Weaknesses (CWE)

CWE-798

References

FAQ

What is CVE-2025-15628?

CVE-2025-15628 is a vulnerability with a CVSS score of 7.5 (HIGH). Affected Omada devices rely on embedded certificates that are shared across deployments to establish trust between controllers and managed devices. An attacker who obtains the embedded certif...

How severe is CVE-2025-15628?

CVE-2025-15628 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-15628?

Check the references section above for vendor advisories and patch information. Affected products include: Tp-Link Omada Oc200 V3 Firmware, Tp-Link Omada Oc200 V3, Tp-Link Omada Oc300 Firmware, Tp-Link Omada Oc300, Tp-Link Omada Oc400 Firmware.