Vulnerability Description
An IDOR vulnerability exists in Omada Controllers that allows an attacker with Administrator permissions to manipulate requests and potentially hijack the Owner account.
CVSS Score
6.8
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tp-Link | Omada Controller | < 6.0 |
Related Weaknesses (CWE)
References
- https://support.omadanetworks.com/us/document/115200/Vendor Advisory
- https://support.omadanetworks.com/us/download/software/omada-controller/Product
FAQ
What is CVE-2025-9520?
CVE-2025-9520 is a vulnerability with a CVSS score of 6.8 (MEDIUM). An IDOR vulnerability exists in Omada Controllers that allows an attacker with Administrator permissions to manipulate requests and potentially hijack the Owner account.
How severe is CVE-2025-9520?
CVE-2025-9520 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-9520?
Check the references section above for vendor advisories and patch information. Affected products include: Tp-Link Omada Controller.