PT-2024-2555 · Tp Link · Tp-Link Omada Er605

Beta_B0T + 3 · Published 2024-03-14 · Updated 2025-09-18 · CVE-2024-25139

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TP-Link Omada er605 versions 1.0.1 through 2.2.3

Description The issue is caused by an integer overflow in the cloud-brd binary, leading to a heap-based buffer overflow. After heap shaping, an attacker can achieve code execution in the context of the cloud-brd binary that runs at the root level.

Recommendations For versions 1.0.1 through 2.2.3, update to ER605(UN) v2 2.2.4 Build 020240119 to resolve the issue. As a temporary workaround, consider restricting access to the cloud-brd binary to minimize the risk of exploitation.

Fix

Integer Overflow

Buffer Overflow

Weakness Enumeration

CWE-190

CWE-120

Related Identifiers

BDU:2024-02563

CVE-2024-25139

Affected Products

Tp-Link Omada Er605

References · 7

• https://osv.dev/vulnerability/CVE-2024-25139 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-25139 · Security Note
• https://bdu.fstec.ru/vul/2024-02563 · Security Note
• https://github.com/microsoft/Microsoft-TP-Link-Research-Team · Note
• https://t.me/cveNotify/135830 · Telegram Post
• https://tp-link.com/us/omada-sdn · Note
• https://t.me/cvenotify/73801 · Telegram Post