oc300_firmware vulnerabilities

CVEs whose affected-version data names the oc300_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-9290Medium· 5.9

8mo ago

An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values

An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values. Exploitation requires advanced network positioning and allows an attacker t…

▾ Sunlittp-link · omada_controllerEPSS 0.22%via NVD