What is CVE-2025-7375?

CVE-2025-7375 is a medium-severity vulnerability in Tp-Link Omada Eap610, classified under Improper Input Validation. CVSS score: 6.5/10. Published 2026-03-05.

How severe is CVE-2025-7375?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Improper input validation in Tp-Link Omada Eap610

CVE-2025-7375

A denial-of-service (DoS) vulnerability was identified in Omada EAP610 v3. An attacker with adjacent network access can send crafted requests to cause the device’s HTTP service to crash. This results in temporary service unavailability until the device is rebooted. This issue affects Omada EAP610 firmware versions prior to 1.6.0.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.002 (12.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Tp-link Omada_eap610 — versions 3
Tp-link Omada_eap610_firmware
Tp-link Systems Inc. Eap610 V3 — versions 0

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

f23511db-6c3e-4e32-a477-6aa17d310630 (Product, patch)
f23511db-6c3e-4e32-a477-6aa17d310630 (Product, patch)
f23511db-6c3e-4e32-a477-6aa17d310630 (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2025-7375?: CVE-2025-7375 is a medium-severity vulnerability in Tp-Link Omada Eap610, classified under Improper Input Validation. CVSS score: 6.5/10. Published 2026-03-05.
How severe is CVE-2025-7375?: Medium severity. CVSS v3 base score is 6.5 out of 10.