CVE-2025-15630

A race condition exists in the cloud-based Omada device adoption process when an attacker may be able to interact with the adoption workflow before a legitimate device completes registration, resulting in provisioning information being delivered to an attacker. Successful exploitation may allow disclosure of provisioning information intended for a legitimate device.

Score
CVSS 3.1 5.9 Medium
Status
Analyzed - f23511db-6c3e-4e32-a477-6aa17d310630
Published
2026-08-03
Last modified
2026-08-03
Weaknesses
CWE-362

Affected products

References

 
 
© AVABIS GmbH privacypolicy about