OE
Product
Omada Er605 Firmware
14
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 8Medium 5Low 0
Watch
Add Omada Er605 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-25139 | 10.0 | Mar 14 | In TP-Link Omada er605 1.0.1 through (v2.6) 2.2.3, a cloud-brd binary is susceptible to an integer overflow that leads to a heap-based buffer overflow Affected: 1.0 through 2.2.3 |
| CVE-2024-1179 | 8.8 | Apr 1 | TP-Link Omada ER605 DHCPv6 Client Options Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 2.2.4 |
| CVE-2024-1180 | 8.0 | Apr 3 | TP-Link Omada ER605 Access Control Command Injection Remote Code Execution Vulnerability Affected: before 2.2.3 |
| CVE-2025-15629 | 7.5 | Aug 3 | Weak Session Key Generation in TP-Link Omada Adoption Protocol Affected: All versions, or not specified |
| CVE-2025-15628 | 7.5 | Aug 3 | Hardcoded Certificates in TP-Link Omada Device Communications Affected: All versions, or not specified |
| CVE-2024-5243 | 7.5 | May 23 | TP-Link Omada ER605 Buffer Overflow Remote Code Execution Vulnerability Affected: 2.2.2 |
| CVE-2024-5242 | 7.5 | May 23 | TP-Link Omada ER605 Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: 2.2.2 |
| CVE-2024-5228 | 7.5 | May 23 | TP-Link Omada ER605 Comexe DDNS Response Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: 2.2.2 |
| CVE-2024-5227 | 7.5 | May 23 | TP-Link Omada ER605 PPTP VPN username Command Injection Remote Code Execution Vulnerability Affected: 2.2.2 |
| CVE-2025-9291 | 6.5 | Aug 3 | Improper Certificate Validation in TP-Link Omada Cloud Communications Affected: All versions, or not specified |
| CVE-2025-15631 | 5.9 | Aug 3 | Weak Credential Storage in TP-Link Omada Devices Affected: All versions, or not specified |
| CVE-2025-15630 | 5.9 | Aug 3 | Device Provisioning Race Condition in TP-Link Omada Adoption Workflow Affected: All versions, or not specified |
| CVE-2025-15544 | 5.9 | Aug 3 | Weak Credential Protection During TP-Link Omada Device Adoption Affected: All versions, or not specified |
| CVE-2024-5244 | 4.2 | May 23 | TP-Link Omada ER605 Reliance on Security Through Obscurity Vulnerability Affected: 2.2.2 |
Showing 14