CVE-2025-15629: Weak Session Key Generation in TP-Link Omada Adoption Protocol
A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation.
An attacker who successfully intercepts adoption-related communications may be able to recover session encryption keys and decrypt affected communications.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15629?
CVE-2025-15629 is rated with a risk score of 44, indicating a significant security concern.
What is CVE-2025-15629 about?
CVE-2025-15629 describes a cryptographic weakness in the TP-Link Omada adoption protocol that affects the unpredictability of session key generation.
How do I fix CVE-2025-15629?
To mitigate CVE-2025-15629, it is recommended to update your TP-Link Omada adoption protocol to the latest version that addresses this cryptographic weakness.
Who is affected by CVE-2025-15629?
CVE-2025-15629 impacts users of the TP-Link Omada adoption protocol, especially those relying on secure communications between controllers and managed devices.
What could an attacker do if they exploit CVE-2025-15629?
If an attacker exploits CVE-2025-15629, they could predict session keys, potentially leading to interception of sensitive communications.