PT-2026-23474 · Tp Link · Omada Eap610

Felix Thümmler · Published 2026-03-05 · Updated 2026-03-05 · CVE-2025-7375

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Omada EAP610 versions prior to 1.6.0

Description A denial-of-service (DoS) condition exists in Omada EAP610. An attacker with adjacent network access can send crafted requests to the device’s HTTP service, causing it to crash and resulting in temporary service unavailability until a reboot. The affected device is running firmware version 3.

Recommendations Update to firmware version 1.6.0 or later.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-7375

Affected Products

Omada Eap610

References · 7

• https://support.omadanetworks.com/us/document/118100 · Vendor Advisory
• https://support.omadanetworks.com/en/product/eap610/v3 · Patch
• https://support.omadanetworks.com/us/product/eap610/v3 · Patch
• https://osv.dev/vulnerability/CVE-2025-7375 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-7375 · Security Note
• https://twitter.com/cyberbivash/status/2029657041577320588 · Twitter Post
• https://twitter.com/CVEnew/status/2029654718159466928 · Twitter Post