Vulnerability in Tp-link Systems Inc. Omada Access Points
CVE-2025-9291
A certification validation weakness exists in communication between affected Omada devices and cloud controllers. Certificate identity verification does not adequately validate that a presented certificate corresponds to the expected cloud…
Vulnerability class: Improper Certificate Validation
Affected products
- Tp-link Systems Inc. Omada Access Points — versions 0
- Tp-link Systems Inc. Omada Gateways — versions 0
- Tp-link Systems Inc. Omada Switches — versions 0
Weakness classification (CWE)
References
- f23511db-6c3e-4e32-a477-6aa17d310630 (patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (vendor-advisory)