SecBoard
Zurück zur CVE-Übersicht

CVE-2025-7850

HIGH(7.2)

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Risk Signal Score19/100 — NIEDRIG
  • CVSS 7.2 — Hoch

EPSS-Score

3.3%

Exploit-Wahrscheinlichkeit (30 Tage)

CVSS Score

7.2

Technische Schwere

Beschreibung

A command injection vulnerability may be exploited after the admin's authentication on the web portal on Omada gateways.

Betroffene Produkte

  • cpe:2.3:o:tp-link:er8411_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er8411_firmware:1.3.3:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er7412-m2_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er7412-m2_firmware:1.1.0:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er707-m2_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er707-m2_firmware:1.3.1:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er7206_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er7206_firmware:2.2.2:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er605_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er605_firmware:2.3.1:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er706w_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er706w_firmware:1.2.1:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er706w-4g_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er706w-4g_firmware:1.2.1:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er7212pc_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er7212pc_firmware:2.1.3:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:g36_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:g36_firmware:1.1.4:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:g611_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:g611_firmware:1.2.2:-:*:*:*:*:*:*

Referenzen