Omada Oc300 Firmware (Tp-link) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-08-03. Vendor: Tp-link.

CVEs of Omada Oc300 Firmware

• CVE-2025-15630 - CVSS 5.9 (medium), 2026-08-03: A race condition exists in the cloud-based Omada device adoption process when an attacker may be able to interact with the adoption workflow before a…
• CVE-2025-15629 - CVSS 7.5 (high), 2026-08-03: A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed…
• CVE-2025-15628 - CVSS 8.2 (high), 2026-08-03: Affected Omada devices rely on embedded certificates that are shared across deployments to establish trust between controllers and managed devices. An…
• CVE-2025-15627 - CVSS 7.5 (high), 2026-08-03: A cryptographic weakness exists in the Omada adoption protocol.  The protocol relies on hard-coded cryptographic keys to establish trust and protect…
• CVE-2025-15544 - CVSS 6.9 (medium), 2026-08-03: A cryptographic weakness exists in the Omada device adoption process.  During adoption, authentication credentials associated with site management are…