Medium severity5.9NVD Advisory· Published Jan 23, 2026· Updated Jun 17, 2026

CVE-2025-9290

Description

An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values. Exploitation requires advanced network positioning and allows an attacker to intercept adoption traffic and forge valid authentication through offline precomputation, potentially exposing sensitive information and compromising confidentiality.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

TP-Link/Omada Controller2 versions
cpe:2.3:a:tp-link:omada_controller:*:*:*:*:-:*:*:*+ 1 more
- cpe:2.3:a:tp-link:omada_controller:*:*:*:*:-:*:*:*range: <6.0.0.24
- cpe:2.3:a:tp-link:omada_controller:*:*:*:*:cloud:*:*:*range: <6.0.0.100
TP-Link/Beam Bridge 5 Ur Firmware
cpe:2.3:o:tp-link:beam_bridge_5_ur_firmware:*:*:*:*:*:*:*:*
Range: <1.1.5
TP-Link/Dr3220v 4g Firmware
cpe:2.3:o:tp-link:dr3220v-4g_firmware:*:*:*:*:*:*:*:*
Range: <1.1.0
TP-Link/Dr3650v 4g Firmware
cpe:2.3:o:tp-link:dr3650v-4g_firmware:*:*:*:*:*:*:*:*
Range: <1.1.0
TP-Link/Dr3650v Firmware
cpe:2.3:o:tp-link:dr3650v_firmware:*:*:*:*:*:*:*:*
Range: <1.1.0
TP-Link/Eap100 Bridge Kit Firmware
cpe:2.3:o:tp-link:eap100-bridge_kit_firmware:*:*:*:*:*:*:*:*
Range: <1.0.3
TP-Link/Eap211 Bridge Kit Firmware
cpe:2.3:o:tp-link:eap211_bridge_kit_firmware:*:*:*:*:*:*:*:*
Range: <1.1.4
TP-Link/Eap215 Bridge Kit Firmware
cpe:2.3:o:tp-link:eap215_bridge_kit_firmware:*:*:*:*:*:*:*:*
Range: <1.1.4
TP-Link/Eap230 Wall Firmware
cpe:2.3:o:tp-link:eap230-wall_firmware:*:*:*:*:*:*:*:*
Range: <3.3.1
TP-Link/Eap235 Wall Firmware
cpe:2.3:o:tp-link:eap235-wall_firmware:*:*:*:*:*:*:*:*
Range: <3.3.1
TP-Link/Eap603 Outdoor Firmware
cpe:2.3:o:tp-link:eap603-outdoor_firmware:*:*:*:*:*:*:*:*
Range: <1.5.1
TP-Link/Eap603gp Desktop Firmware
cpe:2.3:o:tp-link:eap603gp-desktop_firmware:*:*:*:*:*:*:*:*
Range: <1.1.0
TP-Link/Eap610 Outdoor Firmware
cpe:2.3:o:tp-link:eap610-outdoor_firmware:*:*:*:*:*:*:*:*
Range: <1.6.1
TP-Link/Eap610 Firmware
cpe:2.3:o:tp-link:eap610_firmware:*:*:*:*:*:*:*:*
Range: <1.6.1
TP-Link/Eap610gp Desktop Firmware
cpe:2.3:o:tp-link:eap610gp-desktop_firmware:*:*:*:*:*:*:*:*
Range: <1.1.0
TP-Link/Eap615 Wall Firmware
cpe:2.3:o:tp-link:eap615-wall_firmware:*:*:*:*:*:*:*:*
Range: <1.1.0
TP-Link/Eap615gp Wall Firmware
cpe:2.3:o:tp-link:eap615gp-wall_firmware:*:*:*:*:*:*:*:*
Range: <1.1.0
TP-Link/Eap620 Hd Firmware
cpe:2.3:o:tp-link:eap620_hd_firmware:*:*:*:*:*:*:*:*
Range: <1.6.1
TP-Link/Eap623 Outdoor Hd Firmware
cpe:2.3:o:tp-link:eap623-outdoor_hd_firmware:*:*:*:*:*:*:*:*
Range: <1.6.1
TP-Link/Eap625 Outdoor Hd Firmware
cpe:2.3:o:tp-link:eap625-outdoor_hd_firmware:*:*:*:*:*:*:*:*
Range: <1.6.1
TP-Link/Eap625gp Wall Firmware
cpe:2.3:o:tp-link:eap625gp-wall_firmware:*:*:*:*:*:*:*:*
Range: <1.1.0
TP-Link/Eap650 Desktop Firmware
cpe:2.3:o:tp-link:eap650-desktop_firmware:*:*:*:*:*:*:*:*
Range: <1.1.0
TP-Link/Eap650 Outdoor Firmware
cpe:2.3:o:tp-link:eap650-outdoor_firmware:*:*:*:*:*:*:*:*
Range: <1.3.3
TP-Link/Eap650gp Desktop Firmware
cpe:2.3:o:tp-link:eap650gp-desktop_firmware:*:*:*:*:*:*:*:*
Range: <1.0.1
TP-Link/Eap653 Firmware
cpe:2.3:o:tp-link:eap653_firmware:*:*:*:*:*:*:*:*
Range: <1.3.3
TP-Link/Eap653 Ur Firmware
cpe:2.3:o:tp-link:eap653_ur_firmware:*:*:*:*:*:*:*:*
Range: <1.4.2
TP-Link/Eap655 Wall Firmware
cpe:2.3:o:tp-link:eap655-wall_firmware:*:*:*:*:*:*:*:*
Range: <1.6.2
TP-Link/Eap660 Hd Firmware
cpe:2.3:o:tp-link:eap660_hd_firmware:*:*:*:*:*:*:*:*
Range: <1.6.1
TP-Link/Eap720 Firmware
cpe:2.3:o:tp-link:eap720_firmware:*:*:*:*:*:*:*:*
Range: <1.1.2
TP-Link/Eap723 Firmware
cpe:2.3:o:tp-link:eap723_firmware:*:*:*:*:*:*:*:*
Range: <1.3.2
TP-Link/Eap725 Wall Firmware
cpe:2.3:o:tp-link:eap725-wall_firmware:*:*:*:*:*:*:*:*
Range: <1.1.2
TP-Link/Eap770 Firmware
cpe:2.3:o:tp-link:eap770_firmware:*:*:*:*:*:*:*:*
Range: <1.3.2
TP-Link/Eap772 Outdoor Firmware
cpe:2.3:o:tp-link:eap772-outdoor_firmware:*:*:*:*:*:*:*:*
Range: <1.3.2
TP-Link/Eap772 Firmware
cpe:2.3:o:tp-link:eap772_firmware:*:*:*:*:*:*:*:*
Range: <1.3.2
TP-Link/Eap773 Firmware
cpe:2.3:o:tp-link:eap773_firmware:*:*:*:*:*:*:*:*
Range: <1.1.2
TP-Link/Eap783 Firmware
cpe:2.3:o:tp-link:eap783_firmware:*:*:*:*:*:*:*:*
Range: <1.1.2
TP-Link/Eap787 Firmware
cpe:2.3:o:tp-link:eap787_firmware:*:*:*:*:*:*:*:*
Range: <1.1.2
TP-Link/Er605 Firmware
cpe:2.3:o:tp-link:er605_firmware:*:*:*:*:*:*:*:*
Range: <2.3.2
TP-Link/Er605w Firmware
cpe:2.3:o:tp-link:er605w_firmware:*:*:*:*:*:*:*:*
Range: <2.0.2
TP-Link/Er701 5g Outdoor Firmware
cpe:2.3:o:tp-link:er701-5g-outdoor_firmware:*:*:*:*:*:*:*:*
Range: <1.0.0
TP-Link/Er703wp 4g Outdoor Firmware
cpe:2.3:o:tp-link:er703wp-4g-outdoor_firmware:*:*:*:*:*:*:*:*
Range: <1.1.0
TP-Link/Er706w 4g Firmware
cpe:2.3:o:tp-link:er706w-4g_firmware:*:*:*:*:*:*:*:*
Range: <1.2.1
TP-Link/Er706w Firmware
cpe:2.3:o:tp-link:er706w_firmware:*:*:*:*:*:*:*:*
Range: <1.2.1
TP-Link/Er706wp 4g Firmware
cpe:2.3:o:tp-link:er706wp-4g_firmware:*:*:*:*:*:*:*:*
Range: <1.1.0
TP-Link/Er707 M2 Firmware
cpe:2.3:o:tp-link:er707-m2_firmware:*:*:*:*:*:*:*:*
Range: <1.3.1
TP-Link/Er7206 Firmware
cpe:2.3:o:tp-link:er7206_firmware:*:*:*:*:*:*:*:*
Range: <2.2.2
TP-Link/Er7212pc Firmware
cpe:2.3:o:tp-link:er7212pc_firmware:*:*:*:*:*:*:*:*
Range: <2.2.1
TP-Link/Er7406 Firmware
cpe:2.3:o:tp-link:er7406_firmware:*:*:*:*:*:*:*:*
Range: <1.2.2
TP-Link/Er7412 M2 Firmware
cpe:2.3:o:tp-link:er7412-m2_firmware:*:*:*:*:*:*:*:*
Range: <1.1.0
TP-Link/Er8411 Firmware
cpe:2.3:o:tp-link:er8411_firmware:*:*:*:*:*:*:*:*
Range: <1.3.5
TP-Link/Fr365 Firmware
cpe:2.3:o:tp-link:fr365_firmware:*:*:*:*:*:*:*:*
Range: <1.1.10
TP-Link/G36w 4g Firmware
cpe:2.3:o:tp-link:g36w-4g_firmware:*:*:*:*:*:*:*:*
Range: <1.1.5
TP-Link/Oc200 Firmware
cpe:2.3:o:tp-link:oc200_firmware:*:*:*:*:*:*:*:*
Range: <1.37.9
TP-Link/Oc220 Firmware2 versions
cpe:2.3:o:tp-link:oc220_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:tp-link:oc220_firmware:*:*:*:*:*:*:*:*range: <1.1.3
- cpe:2.3:o:tp-link:oc220_firmware:-:*:*:*:*:*:*:*
TP-Link/Oc300 Firmware
cpe:2.3:o:tp-link:oc300_firmware:*:*:*:*:*:*:*:*
Range: <1.31.9
TP-Link/Oc400 Firmware
cpe:2.3:o:tp-link:oc400_firmware:*:*:*:*:*:*:*:*
Range: <1.9.9
Omada Networks/Omada Controllersllm-fuzzy
TP-Link Systems Inc./Omada Access Point (EAP653 UR v1.0)v5
Range: 0
TP-Link/Omada Access Point (eap772 V1.0, Eap773 V1.0, Eap783 V1.0, Eap787 V1.0, Eap720 V1.0, Eap725 Wall V1.0, Eap723 V2.0)v5
Range: 0
TP-Link/Omada Gateway (er707 M2, Er 8411)v5
Range: 0
TP-Link/Omada Software Controllerv5
Range: 0
TP-Link/Omada Access Point (eap215 Bridge Kit 3.0, Eap211 Bridge Kit 3.0)v5
Range: 0

cvss	0.384
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2025-9290

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions