VULNERABILITY INTELLIGENCE

CVE-2025-15544

CVSS score5.9 MEDIUM
EPSS probability0.34%
CISA KEVNot currently listed
Published2026-08-03
Last modified2026-09-29
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

A cryptographic weakness exists in the Omada device adoption process.  During adoption, authentication credentials associated with site management are transmitted using a weak hashing algorithm that does not provide sufficient protection. An attacker who successfully intercepts adoption-related authentication traffic may be able to recover valid credentials and gain unauthorized access to managed devices or controller-managed environments.

Weakness classification

  • f23511db-6c3e-4e32-a477-6aa17d310630: CWE-759

Primary references