Weak Credential Protection During TP-Link Omada Device Adoption
A cryptographic
weakness exists in the Omada device adoption process. During adoption, authentication credentials associated
with site management are transmitted using a weak hashing algorithm that does
not provide sufficient protection.
An attacker who
successfully intercepts adoption-related authentication traffic may be able to
recover valid credentials and gain unauthorized access to managed devices or
controller-managed environments.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Omada Gateways
Vendor
TP-Link Systems Inc.
Product
Omada Gateways
Platforms
Unknown
Default status
unaffected
Omada Gateways · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
Unavailable
None listed
Omada Switches
Vendor
TP-Link Systems Inc.
Product
Omada Switches
Platforms
Unknown
Default status
unaffected
Omada Switches · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
Unavailable
None listed
Omada Access Points
Vendor
TP Link Systems Inc.
Product
Omada Access Points
Platforms
Unknown
Default status
unaffected
Omada Access Points · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
Unavailable
None listed
Omada App
Vendor
TP-Link Systems Inc.
Product
Omada App
Platforms
Unknown
Default status
unaffected
Omada App · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
Unavailable
None listed
Omada Controllers
Vendor
TP-Link Systems Inc
Product
Omada Controllers
Platforms
Unknown
Default status
unaffected
Omada Controllers · Scoped product and version facts