---
id: CVE-2025-15627
title: "A cryptographic\nweakness exists in the Omada adoption protocol.\_\nThe protocol relies on hard-coded cryptographic keys to establish trust and\nprotect authentication exchanges between controllers and managed devices during\ndevice adoption.…"
summary: "A cryptographic\nweakness exists in the Omada adoption protocol.\_\nThe protocol relies on hard-coded cryptographic keys to establish trust and\nprotect authentication exchanges between controllers and managed devices during\ndevice adoption.…"
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-321
vendor: tp-link
product: omada_oc200_v3_firmware
affected:
  - omada_oc200_v3_firmware
  - omada_oc300_firmware
  - omada_oc400_firmware
  - omada_fusion_2.5g_firmware
  - omada_er707-m2_firmware
  - omada_tl-sg3452x_firmware
  - omada_sg3428xmpp_firmware
  - omada_sg3428xmp_firmware
  - omada_sg3428x_firmware
  - omada_sg2005p-pd_firmware
  - omada_sg3452p_firmware
  - omada_sg3452_firmware
  - omada_sg3428mp_firmware
  - omada_sg3428_firmware
  - omada_sg3210_firmware
  - omada_tl-sg3210_firmware
  - omada_sg2452lp_firmware
  - omada_sg2428p_firmware
  - omada_sg2428lp_firmware
  - omada_sg2218p_firmware
  - omada_sg2218_firmware
  - omada_sg2016p_firmware
  - omada_sg2210mp_firmware
  - omada_sg2210p_firmware
  - omada_sg2008p_firmware
  - omada_sg2008_firmware
  - omada_sg2206mp_firmware
  - omada_es210xpp-m2_firmware
  - omada_es210x-m2_firmware
  - omada_es206xpp-m2_firmware
  - omada_es206x-m2_firmware
  - omada_es228gmp_firmware
  - omada_es228gp_firmware
  - omada_es224g_firmware
  - omada_es220gp_firmware
  - omada_es216g_firmware
  - omada_es210gmp_firmware
  - omada_es210gp_firmware
  - omada_es208gp_firmware
  - omada_es208g_firmware
  - omada_es206gp_firmware
  - omada_es205gp_firmware
  - omada_es205g_firmware
  - omada_es220gmp_firmware
  - omada_es1024ge_firmware
  - omada_ds1016ge_firmware
  - omada_ds108ge_firmware
  - omada_ds105ge_firmware
  - omada_ds1008x_firmware
  - omada_ds105x_firmware
  - omada_ds108g-m2_firmware
  - omada_ds105g-m2_firmware
  - omada_ds1024g_firmware
  - omada_ds1016g_firmware
  - omada_ds110gmp_firmware
  - omada_ds108g_firmware
  - omada_ds106gpp_firmware
  - omada_ds106p_firmware
  - omada_ds105g_firmware
  - omada_ds111p_firmware
  - omada_ds1018gmp_firmware
  - omada_ds108gp_firmware
  - omada_ds105gp_firmware
  - omada_ies210gpp_firmware
  - omada_ies206gpp_firmware
  - omada_ies208g_firmware
  - omada_ies206g_firmware
  - omada_eap660hd_firmware
  - omada_eap620hd_firmware
  - omada_eap610_firmware
  - omada_eap615-wall_firmware
  - omada_eap610-outdoor_firmware
  - omada_er7206_firmware
  - omada_er706w_firmware
  - omada_er8411_firmware
  - omada_er605_firmware
  - omada_er7412-m2_firmware
  - omada_er706w-4g_firmware
  - omada_er703wp-4g-outdoor_firmware
  - omada_er706wp-4g_firmware
  - omada_s7500-24y4c_firmware
  - omada_s7500-26xf6y_firmware
  - omada_s6500-48mpp6y_firmware
  - omada_s6500-24mpp4y_firmware
  - omada_s6500-48gp6xf_firmware
  - omada_s6500-48g6xf_firmware
  - omada_s6500-24gp4xf_firmware
  - omada_s6500-24g4xf_firmware
  - omada_sx6632yf_firmware
  - omada_sx3032f_firmware
  - omada_sx3016f_firmware
  - omada_sx3008f_firmware
  - omada_sg3428xf_firmware
  - omada_sx3832mpp_firmware
  - omada_sx3832_firmware
  - omada_sx3206hpp_firmware
  - omada_sg3428xpp-m2_firmware
  - omada_sg3428x-m2_firmware
  - omada_sg3218xp-m2_firmware
  - omada_sg3210xhp-m2_firmware
published: '2026-08-03'
updated: '2026-09-29'
sourceUpdated: '2026-09-29T14:10:00.117'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-15627'
references:
  - url: 'https://www.omadanetworks.com/en/support/download/'
    label: f23511db-6c3e-4e32-a477-6aa17d310630
  - url: 'https://www.omadanetworks.com/us/support/download/'
    label: f23511db-6c3e-4e32-a477-6aa17d310630
  - url: 'https://www.tp-link.com/us/support/faq/5216/'
    label: f23511db-6c3e-4e32-a477-6aa17d310630
tags:
  - nvd
epss: 0.00676
epssPercentile: 0.50304
ingestedAt: '2026-09-29T14:36:14.074Z'
---

## Overview

A cryptographic
weakness exists in the Omada adoption protocol. 
The protocol relies on hard-coded cryptographic keys to establish trust and
protect authentication exchanges between controllers and managed devices during
device adoption.









An attacker may
be able to impersonate trusted controllers or managed devices and gain access
to sensitive adoption-related communications.

## Affected

- `omada_oc200_v3_firmware`
- `omada_oc300_firmware`
- `omada_oc400_firmware`
- `omada_fusion_2.5g_firmware`
- `omada_er707-m2_firmware`
- `omada_tl-sg3452x_firmware`
- `omada_sg3428xmpp_firmware`
- `omada_sg3428xmp_firmware`
- `omada_sg3428x_firmware`
- `omada_sg2005p-pd_firmware`
- `omada_sg3452p_firmware`
- `omada_sg3452_firmware`
- `omada_sg3428mp_firmware`
- `omada_sg3428_firmware`
- `omada_sg3210_firmware`
- `omada_tl-sg3210_firmware`
- `omada_sg2452lp_firmware`
- `omada_sg2428p_firmware`
- `omada_sg2428lp_firmware`
- `omada_sg2218p_firmware`
- `omada_sg2218_firmware`
- `omada_sg2016p_firmware`
- `omada_sg2210mp_firmware`
- `omada_sg2210p_firmware`
- `omada_sg2008p_firmware`
- `omada_sg2008_firmware`
- `omada_sg2206mp_firmware`
- `omada_es210xpp-m2_firmware`
- `omada_es210x-m2_firmware`
- `omada_es206xpp-m2_firmware`
- `omada_es206x-m2_firmware`
- `omada_es228gmp_firmware`
- `omada_es228gp_firmware`
- `omada_es224g_firmware`
- `omada_es220gp_firmware`
- `omada_es216g_firmware`
- `omada_es210gmp_firmware`
- `omada_es210gp_firmware`
- `omada_es208gp_firmware`
- `omada_es208g_firmware`
- `omada_es206gp_firmware`
- `omada_es205gp_firmware`
- `omada_es205g_firmware`
- `omada_es220gmp_firmware`
- `omada_es1024ge_firmware`
- `omada_ds1016ge_firmware`
- `omada_ds108ge_firmware`
- `omada_ds105ge_firmware`
- `omada_ds1008x_firmware`
- `omada_ds105x_firmware`
- `omada_ds108g-m2_firmware`
- `omada_ds105g-m2_firmware`
- `omada_ds1024g_firmware`
- `omada_ds1016g_firmware`
- `omada_ds110gmp_firmware`
- `omada_ds108g_firmware`
- `omada_ds106gpp_firmware`
- `omada_ds106p_firmware`
- `omada_ds105g_firmware`
- `omada_ds111p_firmware`
- `omada_ds1018gmp_firmware`
- `omada_ds108gp_firmware`
- `omada_ds105gp_firmware`
- `omada_ies210gpp_firmware`
- `omada_ies206gpp_firmware`
- `omada_ies208g_firmware`
- `omada_ies206g_firmware`
- `omada_eap660hd_firmware`
- `omada_eap620hd_firmware`
- `omada_eap610_firmware`
- `omada_eap615-wall_firmware`
- `omada_eap610-outdoor_firmware`
- `omada_er7206_firmware`
- `omada_er706w_firmware`
- `omada_er8411_firmware`
- `omada_er605_firmware`
- `omada_er7412-m2_firmware`
- `omada_er706w-4g_firmware`
- `omada_er703wp-4g-outdoor_firmware`
- `omada_er706wp-4g_firmware`
- `omada_s7500-24y4c_firmware`
- `omada_s7500-26xf6y_firmware`
- `omada_s6500-48mpp6y_firmware`
- `omada_s6500-24mpp4y_firmware`
- `omada_s6500-48gp6xf_firmware`
- `omada_s6500-48g6xf_firmware`
- `omada_s6500-24gp4xf_firmware`
- `omada_s6500-24g4xf_firmware`
- `omada_sx6632yf_firmware`
- `omada_sx3032f_firmware`
- `omada_sx3016f_firmware`
- `omada_sx3008f_firmware`
- `omada_sg3428xf_firmware`
- `omada_sx3832mpp_firmware`
- `omada_sx3832_firmware`
- `omada_sx3206hpp_firmware`
- `omada_sg3428xpp-m2_firmware`
- `omada_sg3428x-m2_firmware`
- `omada_sg3218xp-m2_firmware`
- `omada_sg3210xhp-m2_firmware`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.