CVE-2025-15627: Hardcoded Cryptographic Keys in TP-Link Omada Adoption Protocol Authentication
A cryptographic weakness exists in the Omada adoption protocol. The protocol relies on hard-coded cryptographic keys to establish trust and protect authentication exchanges between controllers and managed devices during device adoption.
An attacker may be able to impersonate trusted controllers or managed devices and gain access to sensitive adoption-related communications.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15627?
The severity of CVE-2025-15627 is rated at 56.
What vulnerabilities are associated with CVE-2025-15627?
CVE-2025-15627 is associated with hardcoded cryptographic keys that compromise authentication in the Omada adoption protocol.
How does CVE-2025-15627 impact device security?
CVE-2025-15627 allows an attacker to impersonate trusted controllers during device adoption, potentially leading to unauthorized access.
How do I fix CVE-2025-15627?
To fix CVE-2025-15627, it is essential to implement a patch or update from TP-Link that replaces the hardcoded keys with more secure alternatives.
Which devices are affected by CVE-2025-15627?
CVE-2025-15627 affects devices that utilize the TP-Link Omada adoption protocol for authentication.