CVE-2025-15629
Weak Session Key Generation in TP-Link Omada Adoption Protocol
A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation.
An attacker who successfully intercepts adoption-related communications may be able to recover session encryption keys and decrypt affected communications.
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Passive
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Weak Session Key Generation in TP-Link Omada Adoption Protocol
A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation.
An attacker who successfully intercepts adoption-related communications may be able to recover session encryption keys and decrypt affected communications.
- Record
CVE-2025-15629- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N - Weakness
- CWE-331
- Updated
- 2026-11-02
EUVDEUVD-2025-210611
A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation.
An attacker who successfully intercepts adoption-related communications may be able to recover session encryption keys and decrypt affected communications.
- Record
EUVD-2025-210611- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-5wj2-44xm-2hrq
A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used...
A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation.
An attacker who successfully intercepts adoption-related communications may be able to recover session encryption keys and decrypt affected communications.
- Record
GHSA-5wj2-44xm-2hrq- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-331
- Updated
- 2026-11-02
NVD
A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation.
An attacker who successfully intercepts adoption-related communications may be able to recover session encryption keys and decrypt affected communications.
- Record
CVE-2025-15629- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-331
- Updated
- 2026-11-02
Affected products
- tp link systems inc. omada access points
- tp-link omada ds1008x firmware
- tp-link omada ds1016g firmware
- tp-link omada ds1016ge firmware
- tp-link omada ds1018gmp firmware
- tp-link omada ds1024g firmware
- tp-link omada ds105g-m2 firmware
- tp-link omada ds105g firmware
- tp-link omada ds105ge firmware
- tp-link omada ds105gp firmware
- tp-link omada ds105x firmware
- tp-link omada ds106gpp firmware
Show 105 moreShow less
- tp-link omada ds106p firmware
- tp-link omada ds108g-m2 firmware
- tp-link omada ds108g firmware
- tp-link omada ds108ge firmware
- tp-link omada ds108gp firmware
- tp-link omada ds110gmp firmware
- tp-link omada ds111p firmware
- tp-link omada eap610-outdoor firmware
- tp-link omada eap610 firmware
- tp-link omada eap615-wall firmware
- tp-link omada eap620hd firmware
- tp-link omada eap660hd firmware
- tp-link omada er605 firmware
- tp-link omada er703wp-4g-outdoor firmware
- tp-link omada er706w-4g firmware
- tp-link omada er706w firmware
- tp-link omada er706wp-4g firmware
- tp-link omada er707-m2 firmware
- tp-link omada er7206 firmware
- tp-link omada er7412-m2 firmware
- tp-link omada er8411 firmware
- tp-link omada es1024ge firmware
- tp-link omada es205g firmware
- tp-link omada es205gp firmware
- tp-link omada es206gp firmware
- tp-link omada es206x-m2 firmware
- tp-link omada es206xpp-m2 firmware
- tp-link omada es208g firmware
- tp-link omada es208gp firmware
- tp-link omada es210gmp firmware
- tp-link omada es210gp firmware
- tp-link omada es210x-m2 firmware
- tp-link omada es210xpp-m2 firmware
- tp-link omada es216g firmware
- tp-link omada es220gmp firmware
- tp-link omada es220gp firmware
- tp-link omada es224g firmware
- tp-link omada es228gmp firmware
- tp-link omada es228gp firmware
- tp-link omada fusion 2.5g firmware
- tp-link omada ies206g firmware
- tp-link omada ies206gpp firmware
- tp-link omada ies208g firmware
- tp-link omada ies210gpp firmware
- tp-link omada oc200 v3 firmware
- tp-link omada oc300 firmware
- tp-link omada oc400 firmware
- tp-link omada s6500-24g4xf firmware
- tp-link omada s6500-24gp4xf firmware
- tp-link omada s6500-24mpp4y firmware
- tp-link omada s6500-48g6xf firmware
- tp-link omada s6500-48gp6xf firmware
- tp-link omada s6500-48mpp6y firmware
- tp-link omada s7500-24y4c firmware
- tp-link omada s7500-26xf6y firmware
- tp-link omada sg2005p-pd firmware
- tp-link omada sg2008 firmware
- tp-link omada sg2008p firmware
- tp-link omada sg2016p firmware
- tp-link omada sg2206mp firmware
- tp-link omada sg2210mp firmware
- tp-link omada sg2210p firmware
- tp-link omada sg2210xmp-m2 firmware
- tp-link omada sg2218 firmware
- tp-link omada sg2218p firmware
- tp-link omada sg2428lp firmware
- tp-link omada sg2428p firmware
- tp-link omada sg2452lp firmware
- tp-link omada sg3210 firmware
- tp-link omada sg3210x-m2 firmware
- tp-link omada sg3210xhp-m2 firmware
- tp-link omada sg3218xp-m2 firmware
- tp-link omada sg3428 firmware
- tp-link omada sg3428mp firmware
- tp-link omada sg3428x-m2 firmware
- tp-link omada sg3428x firmware
- tp-link omada sg3428xf firmware
- tp-link omada sg3428xmp firmware
- tp-link omada sg3428xmpp firmware
- tp-link omada sg3428xpp-m2 firmware
- tp-link omada sg3452 firmware
- tp-link omada sg3452p firmware
- tp-link omada sg3452xmpp firmware
- tp-link omada sg3452xp firmware
- tp-link omada sg5428x firmware
- tp-link omada sg5428xmpp firmware
- tp-link omada sg5452x firmware
- tp-link omada sg5452xmpp firmware
- tp-link omada sg6428x firmware
- tp-link omada sg6428xhp firmware
- tp-link omada sg6654x firmware
- tp-link omada sg6654xhp firmware
- tp-link omada sx3008f firmware
- tp-link omada sx3016f firmware
- tp-link omada sx3032f firmware
- tp-link omada sx3206hpp firmware
- tp-link omada sx3832 firmware
- tp-link omada sx3832mpp firmware
- tp-link omada sx6632yf firmware
- tp-link omada tl-sg3210 firmware
- tp-link omada tl-sg3452x firmware
- tp-link systems inc omada controllers
- tp-link systems inc. omada access points
- tp-link systems inc. omada gateways
- tp-link systems inc. omada switches
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-15629 is a medium vulnerability (CVSS 6.9) in Tp Link Systems Inc. Omada Access Points, published August 3, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 26th percentile. No source names a fixed version.