CVE-2025-15544 — Weak Credential Protection During TP-Link Omada Device Adoption
A cryptographic weakness exists in the Omada device adoption process. During adoption, authentication credentials associated with site management are transmitted using a weak h…
Published: 2026-08-03 · CVSS: 6.9 · CVSS 4.0
A cryptographic weakness exists in the Omada device adoption process. During adoption, authentication credentials associated with site management are transmitted using a weak hashing algorithm that does not provide sufficient protection. An attacker who successfully intercepts adoption-related authentication traffic may be able to recover valid credentials and gain unauthorized access to managed devices or controller-managed environments.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7