Description
A cryptographic
weakness exists in the Omada device adoption process. During adoption, authentication credentials associated
with site management are transmitted using a weak hashing algorithm that does
not provide sufficient protection.
An attacker who
successfully intercepts adoption-related authentication traffic may be able to
recover valid credentials and gain unauthorized access to managed devices or
controller-managed environments.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TP-Link Systems | Omada Gateways | — | — |
| TP-Link Systems | Omada Switches | — | — |
| TP Link Systems | Omada Access Points | — | — |
| TP-Link Systems | Omada App | — | — |
| TP-Link Systems | Omada Controllers | — | — |
| TP-Link Systems | Omada OLTs | — | — |