CVE-2025-15628: Hardcoded Certificates in TP-Link Omada Device Communications
Affected Omada devices rely on embedded certificates that are shared across deployments to establish trust between controllers and managed devices.
An attacker who obtains the embedded certificates may be able to impersonate trusted controllers or devices and intercept affected communications.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15628?
CVE-2025-15628 has a risk rating of 50, indicating a medium level of severity.
How do I fix CVE-2025-15628?
To fix CVE-2025-15628, ensure you update to the latest firmware provided by TP-Link for affected Omada devices.
What are the implications of CVE-2025-15628?
CVE-2025-15628 allows attackers to impersonate trusted controllers or devices, potentially leading to intercepted communications.
Which devices are affected by CVE-2025-15628?
CVE-2025-15628 affects multiple Omada devices that use hardcoded certificates for communication.
How can attackers exploit CVE-2025-15628?
Attackers can exploit CVE-2025-15628 by obtaining embedded certificates, enabling them to impersonate trusted parties.