Description
A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation. An attacker who successfully intercepts adoption-related communications may be able to recover session encryption keys and decrypt affected communications.
Affected products
tp-link: omada oc200 v3 firmware; tp-link: omada oc200 v3; tp-link: omada oc300 firmware; tp-link: omada oc300; tp-link: omada oc400 firmware; tp-link: omada oc400; tp-link: omada fusion 2.5g firmware; tp-link: omada fusion 2.5g; tp-link: omada er707-m2 firmware; tp-link: omada er707-m2; tp-link: omada er7206 firmware; tp-link: omada er7206; tp-link: omada er706w firmware; tp-link: omada er706w; tp-link: omada er8411 firmware
References3
- www.tp-link.com/us/support/faq/5216/ Vendor Advisory
- www.omadanetworks.com/en/support/download/ Product
- www.omadanetworks.com/us/support/download/ Product
Metrics
- CVSS 3.1
-
7.5
HIGH
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS 4.0
-
6.9
MEDIUM
Score source: CNA
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - EPSS — exploit probability
- 0% percentile: 27 · as of 13 November 2026
- CWE
- CWE-331
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.