VYPR
High severity7.2NVD Advisory· Published Oct 21, 2025· Updated Jun 17, 2026

CVE-2025-7850

CVE-2025-7850

Description

A command injection vulnerability may be exploited after the admin's authentication on the web portal on Omada gateways.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

30
  • TP-Link Systems Inc./Festa gatewaysv5
    Range: 0
  • TP-Link/Omada Gatewaycpe-rescue2 versions
    0+ 1 more
    • (no CPE)range: 0
    • (no CPE)range: 0
  • cpe:2.3:o:tp-link:er8411_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:tp-link:er8411_firmware:*:*:*:*:*:*:*:*range: <1.3.3
    • cpe:2.3:o:tp-link:er8411_firmware:1.3.3:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er7412-m2_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:tp-link:er7412-m2_firmware:*:*:*:*:*:*:*:*range: <1.1.0
    • cpe:2.3:o:tp-link:er7412-m2_firmware:1.1.0:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er707-m2_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:tp-link:er707-m2_firmware:*:*:*:*:*:*:*:*range: <1.3.1
    • cpe:2.3:o:tp-link:er707-m2_firmware:1.3.1:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er7206_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:tp-link:er7206_firmware:*:*:*:*:*:*:*:*range: <2.2.2
    • cpe:2.3:o:tp-link:er7206_firmware:2.2.2:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er605_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:tp-link:er605_firmware:*:*:*:*:*:*:*:*range: <2.3.1
    • cpe:2.3:o:tp-link:er605_firmware:2.3.1:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er706w_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:tp-link:er706w_firmware:*:*:*:*:*:*:*:*range: <1.2.1
    • cpe:2.3:o:tp-link:er706w_firmware:1.2.1:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er706w-4g_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:tp-link:er706w-4g_firmware:*:*:*:*:*:*:*:*range: <1.2.1
    • cpe:2.3:o:tp-link:er706w-4g_firmware:1.2.1:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er7212pc_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:tp-link:er7212pc_firmware:*:*:*:*:*:*:*:*range: <2.1.3
    • cpe:2.3:o:tp-link:er7212pc_firmware:2.1.3:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:g36_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:tp-link:g36_firmware:*:*:*:*:*:*:*:*range: <1.1.4
    • cpe:2.3:o:tp-link:g36_firmware:1.1.4:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:g611_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:tp-link:g611_firmware:*:*:*:*:*:*:*:*range: <1.2.2
    • cpe:2.3:o:tp-link:g611_firmware:1.2.2:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:fr365_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:tp-link:fr365_firmware:*:*:*:*:*:*:*:*range: <1.1.10
    • cpe:2.3:o:tp-link:fr365_firmware:1.1.10:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:fr205_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:tp-link:fr205_firmware:*:*:*:*:*:*:*:*range: <1.0.3
    • cpe:2.3:o:tp-link:fr205_firmware:1.0.3:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:fr307-m2_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:tp-link:fr307-m2_firmware:*:*:*:*:*:*:*:*range: <1.2.5
    • cpe:2.3:o:tp-link:fr307-m2_firmware:1.2.5:-:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

5

News mentions

5