PT-2026-23474 · Tp Link · Omada Eap610

Felix Thümmler · Publicado 2026-03-05 · Atualizado 2026-03-05 · CVE-2025-7375

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Média

Vetor base

AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Omada EAP610 versions prior to 1.6.0

Description A denial-of-service (DoS) condition exists in Omada EAP610. An attacker with adjacent network access can send crafted requests to the device’s HTTP service, causing it to crash and resulting in temporary service unavailability until a reboot. The affected device is running firmware version 3.

Recommendations Update to firmware version 1.6.0 or later.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2025-7375

Produtos afetados

Omada Eap610

Referências · 7

• https://twitter.com/cyberbivash/status/2029657041577320588 · Publicação no Twitter
• https://support.omadanetworks.com/us/document/118100 · Aviso do Fabricante
• https://support.omadanetworks.com/en/product/eap610/v3 · Correção
• https://support.omadanetworks.com/us/product/eap610/v3 · Correção
• https://osv.dev/vulnerability/CVE-2025-7375 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2029654718159466928 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-7375 · Nota de Segurança