Multiple vulnerabilities in TP-Link Omada products, including Access Points, Controllers, Gateways, OLTs, Switches, and the Omada App, allow a remote attacker to bypass security restrictions, disclose sensitive information, and conduct spoofing attacks. The article does not provide specific CVSS scores, affected version ranges, or fixed version numbers. Administrators must apply the fixes issued by the vendor, available via the provided support link, as the primary mitigation.
Multiple vulnerabilities were identified in TP-Link Omada Products. A remote attacker could exploit some of these vulnerabilities to trigger security restriction bypass, sensitive information disclosure and spoofing on the targeted system. Impact Information Disclosure Security Restriction Bypass Spoofing System / Technologies affected Omada Access Points Omada App Omada Controllers Omada Gateways Omada OLTs Omada Switches Solutions Before installation of the software, please visit the vendor web-site for more details. Apply fixes issued by the vendor: https://support.omadanetworks.com/us/document/130626/