CVE-2025-15629

Name of the Vulnerable Software and Affected Versions TP-Link Omada (affected versions not specified)

Description A cryptographic weakness exists in the Omada adoption protocol. Session encryption keys used to protect communications between controllers and managed devices may be predictable because of insufficient entropy during session key generation. Entropy refers to the randomness collected for use in cryptographic operations. An attacker who intercepts adoption-related communications could recover these session encryption keys to decrypt the affected traffic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.