1. Home
  2. CVE Database
  3. CVE-2025-15631
MEDIUM · 5.9

CVE-2025-15631

A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing algorithm that does not provide sufficient protection. An attacker who ob...

Vulnerability Description

A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing algorithm that does not provide sufficient protection. An attacker who obtains access to stored credential data may be able to recover valid credentials to gain unauthorized access to affected devices or management environments.

CVSS Score

5.9

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
Tp-LinkOmada Fusion 2.5G Firmware-
Tp-LinkOmada Fusion 2.5G-
Tp-LinkOmada Er707-M2 Firmware-
Tp-LinkOmada Er707-M2-
Tp-LinkOmada Er7206 Firmware-
Tp-LinkOmada Er7206-
Tp-LinkOmada Er706W Firmware-
Tp-LinkOmada Er706W-
Tp-LinkOmada Er8411 Firmware-
Tp-LinkOmada Er8411-
Tp-LinkOmada Er605 Firmware-
Tp-LinkOmada Er605-
Tp-LinkOmada Er7412-M2 Firmware-
Tp-LinkOmada Er7412-M2-
Tp-LinkOmada Er706W-4G Firmware-
Tp-LinkOmada Er706W-4G-
Tp-LinkOmada Er703Wp-4G-Outdoor Firmware-
Tp-LinkOmada Er703Wp-4G-Outdoor-
Tp-LinkOmada Er706Wp-4G Firmware-
Tp-LinkOmada Er706Wp-4G-

Related Weaknesses (CWE)

CWE-759

References

FAQ

What is CVE-2025-15631?

CVE-2025-15631 is a vulnerability with a CVSS score of 5.9 (MEDIUM). A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing algorithm that does not provide sufficient protection. An attacker who ob...

How severe is CVE-2025-15631?

CVE-2025-15631 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-15631?

Check the references section above for vendor advisories and patch information. Affected products include: Tp-Link Omada Fusion 2.5G Firmware, Tp-Link Omada Fusion 2.5G, Tp-Link Omada Er707-M2 Firmware, Tp-Link Omada Er707-M2, Tp-Link Omada Er7206 Firmware.