---
cve: "CVE-2025-15628"
severity: "HIGH"
cvss: 8.2
epss: "22%"
vendor: "TP-Link Systems Inc"
kev: false
exploited: false
published: "2026-08-03 19:16:40"
tags: [cve, security, high]
source: tsecurity.de CVE-Dossier
exported: "2026-09-07T13:06:19+02:00"
---

# CVE-2025-15628

> 8.2 HIGH

## Beschreibung

Affected
Omada devices rely on embedded certificates that are shared across deployments
to establish trust between controllers and managed devices.









An attacker
who obtains the embedded certificates may be able to impersonate trusted
controllers or devices and intercept affected communications.

## CVSS-Vektor

```
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Benachbart | warn |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |

## Referenzen

- <https://www.omadanetworks.com/us/support/download/>
- <https://www.omadanetworks.com/en/support/download/>
- <https://www.tp-link.com/us/support/faq/5216/>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2025-15628) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_