Unencrypted Credential Transmission in Omada Gateway Dynamic DNS Authentication in Omada Gateways
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| TP-Link Systems Inc. | ER7212PC v2 | unaffected |
|
||||||
| TP-Link Systems Inc. | ER605 v2 | unaffected |
|
||||||
| TP-Link Systems Inc. | ER7206 v2 | unaffected |
|
||||||
| TP-Link Systems Inc | ER7406 v1 | unaffected |
|
||||||
| TP-Link Systems Inc. | ER707-M2 v1 | unaffected |
|
||||||
| TP-Link Systems Inc | ER7412-M2 v1 | unaffected |
|
||||||
| TP-Link Systems Inc. | ER8411 v1 | unaffected |
|
||||||
| TP-Link Systems Inc. | ER706W v1 | unaffected |
|
||||||
| TP-Link Systems Inc. | v1 | unaffected |
|
||||||
| TP-Link Systems Inc. | ER706W-4G v2 | unaffected |
|
||||||
| TP-Link Systems Inc. | ER706WP-4G v1 | unaffected |
|
||||||
| TP-Link Systems Inc. | ER703WP-4G-Outdoor v1 | unaffected |
|
||||||
| TP-Link Systems Inc. | DR3220v-4G v1 | unaffected |
|
||||||
| TP-Link Systems Inc. | DR3650v v1 | unaffected |
|
||||||
| TP-Link Systems Inc. | DR3650v-4G v1 | unaffected |
|
||||||
| TP-Link Systems Inc. | ER603WP-4G-Outdoor v1 | unaffected |
|
||||||
| TP-Link Systems Inc. | DR3150 v1 | unaffected |
|
||||||
| TP-Link Systems Inc. | ER701-5G-Outdoor v1 | unaffected |
|
||||||
| TP-Link Systems Inc. | ER605W v2 | unaffected |
|
Configuration 1 [-]
| AND |
|
Configuration 2 [-]
| AND |
|
Configuration 3 [-]
| AND |
|
Configuration 4 [-]
| AND |
|
Configuration 5 [-]
| AND |
|
Configuration 6 [-]
| AND |
|
Configuration 7 [-]
| AND |
|
Configuration 8 [-]
| AND |
|
Configuration 9 [-]
| AND |
|
Configuration 10 [-]
| AND |
|
Configuration 11 [-]
| AND |
|
Configuration 12 [-]
| AND |
|
Configuration 13 [-]
| AND |
|
Configuration 14 [-]
| AND |
|
Configuration 15 [-]
| AND |
|
Configuration 16 [-]
| AND |
|
Configuration 17 [-]
| AND |
|
Configuration 18 [-]
| AND |
|
Configuration 19 [-]
| AND |
|
No data.
| Vendor | Product | Versions | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Tp-link | Dr3150 V1 |
|
||||||||
| Tp-link | Dr3220v-4g V1 |
|
||||||||
| Tp-link | Dr3650v-4g V1 |
|
||||||||
| Tp-link | Dr3650v V1 |
|
||||||||
| Tp-link | Er603wp-4g-outdoor V1 |
|
||||||||
| Tp-link | Er605 V2 |
|
||||||||
| Tp-link | Er605w V2 |
|
||||||||
| Tp-link | Er701-5g-outdoor V1 |
|
||||||||
| Tp-link | Er703wp-4g-outdoor V1 |
|
||||||||
| Tp-link | Er706w-4g V2 |
|
||||||||
| Tp-link | Er706w V1 |
|
||||||||
| Tp-link | Er706wp-4g V1 |
|
||||||||
| Tp-link | Er707-m2 V1 |
|
||||||||
| Tp-link | Er7206 V2 |
|
||||||||
| Tp-link | Er7212pc V2 |
|
||||||||
| Tp-link | Er8411 V1 |
|
||||||||
| Tp-link | V1 |
|
||||||||
| Tp-link Systems Inc | Er7406 V1 |
|
||||||||
| Tp-link Systems Inc | Er7412-m2 V1 |
|
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.345% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Tp-link dr3150
Tp-link dr3150 Firmware Tp-link dr3220v-4g Tp-link dr3220v-4g Firmware Tp-link dr3650v Tp-link dr3650v-4g Tp-link dr3650v-4g Firmware Tp-link dr3650v Firmware Tp-link er603wp-4g-outdoor Tp-link er603wp-4g-outdoor Firmware Tp-link er605 Tp-link er605 Firmware Tp-link er605w Tp-link er605w Firmware Tp-link er701-5g-outdoor Tp-link er701-5g-outdoor Firmware Tp-link er703wp-4g-outdoor Tp-link er703wp-4g-outdoor Firmware Tp-link er706w Tp-link er706w-4g Tp-link er706w-4g Firmware Tp-link er706w Firmware Tp-link er706wp-4g Tp-link er706wp-4g Firmware Tp-link er707-m2 Tp-link er707-m2 Firmware Tp-link er7206 Tp-link er7206 Firmware Tp-link er7212pc Tp-link er7212pc Firmware Tp-link er7406 Tp-link er7406 Firmware Tp-link er7412-m2 Tp-link er7412-m2 Firmware Tp-link er8411 Tp-link er8411 Firmware |
|
| CPEs | cpe:2.3:h:tp-link:dr3150:-:*:*:*:*:*:*:* cpe:2.3:h:tp-link:dr3220v-4g:-:*:*:*:*:*:*:* cpe:2.3:h:tp-link:dr3650v-4g:-:*:*:*:*:*:*:* cpe:2.3:h:tp-link:dr3650v:-:*:*:*:*:*:*:* cpe:2.3:h:tp-link:er603wp-4g-outdoor:-:*:*:*:*:*:*:* cpe:2.3:h:tp-link:er605:2.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:er605w:2.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:er701-5g-outdoor:-:*:*:*:*:*:*:* cpe:2.3:h:tp-link:er703wp-4g-outdoor:-:*:*:*:*:*:*:* cpe:2.3:h:tp-link:er706w-4g:-:*:*:*:*:*:*:* cpe:2.3:h:tp-link:er706w-4g:2.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:er706w:-:*:*:*:*:*:*:* cpe:2.3:h:tp-link:er706wp-4g:-:*:*:*:*:*:*:* cpe:2.3:h:tp-link:er707-m2:-:*:*:*:*:*:*:* cpe:2.3:h:tp-link:er7206:2.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:er7212pc:2.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:er7406:-:*:*:*:*:*:*:* cpe:2.3:h:tp-link:er7412-m2:-:*:*:*:*:*:*:* cpe:2.3:h:tp-link:er8411:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:dr3150_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:tp-link:dr3220v-4g_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:tp-link:dr3650v-4g_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:tp-link:dr3650v_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:tp-link:er603wp-4g-outdoor_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:tp-link:er605_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:tp-link:er605w_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:tp-link:er701-5g-outdoor_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:tp-link:er703wp-4g-outdoor_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:tp-link:er706w-4g_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:tp-link:er706w_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:tp-link:er706wp-4g_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:tp-link:er707-m2_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:tp-link:er7206_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:tp-link:er7212pc_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:tp-link:er7406_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:tp-link:er7412-m2_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:tp-link:er8411_firmware:*:*:*:*:*:*:*:* |
|
| Vendors & Products |
Tp-link dr3150
Tp-link dr3150 Firmware Tp-link dr3220v-4g Tp-link dr3220v-4g Firmware Tp-link dr3650v Tp-link dr3650v-4g Tp-link dr3650v-4g Firmware Tp-link dr3650v Firmware Tp-link er603wp-4g-outdoor Tp-link er603wp-4g-outdoor Firmware Tp-link er605 Tp-link er605 Firmware Tp-link er605w Tp-link er605w Firmware Tp-link er701-5g-outdoor Tp-link er701-5g-outdoor Firmware Tp-link er703wp-4g-outdoor Tp-link er703wp-4g-outdoor Firmware Tp-link er706w Tp-link er706w-4g Tp-link er706w-4g Firmware Tp-link er706w Firmware Tp-link er706wp-4g Tp-link er706wp-4g Firmware Tp-link er707-m2 Tp-link er707-m2 Firmware Tp-link er7206 Tp-link er7206 Firmware Tp-link er7212pc Tp-link er7212pc Firmware Tp-link er7406 Tp-link er7406 Firmware Tp-link er7412-m2 Tp-link er7412-m2 Firmware Tp-link er8411 Tp-link er8411 Firmware |
|
| Metrics |
cvssV3_1
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Tp-link
Tp-link dr3150 V1 Tp-link dr3220v-4g V1 Tp-link dr3650v-4g V1 Tp-link dr3650v V1 Tp-link er603wp-4g-outdoor V1 Tp-link er605 V2 Tp-link er605w V2 Tp-link er701-5g-outdoor V1 Tp-link er703wp-4g-outdoor V1 Tp-link er706w-4g V2 Tp-link er706w V1 Tp-link er706wp-4g V1 Tp-link er707-m2 V1 Tp-link er7206 V2 Tp-link er7212pc V2 Tp-link er8411 V1 Tp-link v1 Tp-link Systems Inc Tp-link Systems Inc er7406 V1 Tp-link Systems Inc er7412-m2 V1 |
|
| Vendors & Products |
Tp-link
Tp-link dr3150 V1 Tp-link dr3220v-4g V1 Tp-link dr3650v-4g V1 Tp-link dr3650v V1 Tp-link er603wp-4g-outdoor V1 Tp-link er605 V2 Tp-link er605w V2 Tp-link er701-5g-outdoor V1 Tp-link er703wp-4g-outdoor V1 Tp-link er706w-4g V2 Tp-link er706w V1 Tp-link er706wp-4g V1 Tp-link er707-m2 V1 Tp-link er7206 V2 Tp-link er7212pc V2 Tp-link er8411 V1 Tp-link v1 Tp-link Systems Inc Tp-link Systems Inc er7406 V1 Tp-link Systems Inc er7412-m2 V1 |
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A vulnerability exists in the Dynamic DNS (DDNS) functionality of TP-Link Omada Gateways. During communication with a third-party DDNS service, authentication credentials are transmitted over an unencrypted channel. An attacker who can observe or manipulate traffic between an affected device and the DDNS service may obtain sensitive authentication information or interfere with DDNS update operations. Exploitation requires DDNS to be configured, communication with an external DDNS service, and attacker visibility or control of the relevant network path. Successful exploitation may result in disclosure of DDNS account credentials, unauthorized access to DDNS management functionality, or modification of DNS records associated with the affected deployment. | |
| Title | Unencrypted Credential Transmission in Omada Gateway Dynamic DNS Authentication in Omada Gateways | |
| Weaknesses | CWE-319 | |
| References |
| |
| Metrics |
cvssV4_0
|