BaselineWatch
Desk

CVE-2025-7850

9.3 critical SSVC exploitation: none Modified

A command injection vulnerability may be exploited after the admin's authentication on the web portal on Omada gateways.

Fix

Patch, vendor advisory and mitigation references on NVD 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 9.3 · tp-linkNVD modified 2026-10-18 21:10

Affected (CPE criteria) 26

  • cpe:2.3:o:tp-link:er8411_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er8411_firmware:1.3.3:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er7412-m2_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er7412-m2_firmware:1.1.0:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er707-m2_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er707-m2_firmware:1.3.1:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er7206_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er7206_firmware:2.2.2:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er605_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er605_firmware:2.3.1:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er706w_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er706w_firmware:1.2.1:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er706w-4g_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er706w-4g_firmware:1.2.1:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er7212pc_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er7212pc_firmware:2.1.3:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:g36_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:g36_firmware:1.1.4:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:g611_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:g611_firmware:1.2.2:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:fr365_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:fr365_firmware:1.1.10:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:fr205_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:fr205_firmware:1.0.3:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:fr307-m2_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:fr307-m2_firmware:1.2.5:-:*:*:*:*:*:*

References 5