The TP-Link Omada system is a software-defined networking solution for small to medium-sized businesses. It touts cloud-managed devices and local management for all Omada devices. The supported devices in this ecosystem vary greatly but include wireless access points, routers, switches, VPN devices and hardware controllers for the Omada software. Cisco Talos researchers have discovered and helped to patch several vulnerabilities in the Omada system, focusing on a small subset of the available devices, including the EAP 115 and EAP 225 wireless access points, the ER7206 gigabit VPN router, and the Omada software controller. Twelve unique vulnerabilities were identified and reported to the vendor following our responsible disclosure policy.
Talos ID
CVE(s)
TALOS-2023-1888
CVE-2023-49906-CVE-2023-49913
TALOS-2023-1864
CVE-2023-48724
TALOS-2023-1862
CVE-2023-49133-CVE-2023-49134
TALOS-2023-1861
CVE-2023-49074
TALOS-2023-1859
CVE-2023-47618
TALOS-2023-1858
CVE-2023-47617
TALOS-2023-1857
CVE-2023-46683
TAL ..
Support the originator by clicking the read the rest link below.