● CVE — Medium
CVE-2025-15544
Vendortp-linkProductomada er605 firmware, omada er703wp-4g-outdoor firmware, omada er706w-4g firmware, omada er706w firmware, omada er706wp-4g firmware, omada er707-m2 firmware, omada er7206 firmware, omada er7412-m2 firmware, omada er8411 firmware, omada fusion 2.5g firmware, omada s6500-24g4xf firmware, omada s6500-24gp4xf firmware, omada s6500-24mpp4y firmware, omada s6500-48g6xf firmware, omada s6500-48gp6xf firmware, omada s6500-48mpp6y firmware, omada s7500-24y4c firmware, omada s7500-26xf6y firmware, omada sx3008f firmware, omada sx3016f firmware, omada sx3032f firmware, omada sx6632yf firmware, omada oc200 v3 firmware, omada oc300 firmware, omada oc400 firmwareDiscoveredAug 3, 2026UpdatedSep 29, 2026
A cryptographic weakness exists in the Omada device adoption process. During adoption, authentication credentials associated with site management are transmitted using a weak hashing algorithm that does not provide sufficient protection. An attacker who successfully intercepts adoption-related authentication traffic may be able to recover valid credentials and gain unauthorized access to managed devices or controller-managed environments.