Vulnerabilidades do TP-Link Systems Inc. Fr365 Firmware
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam TP-Link Systems Inc. Fr365 Firmware: 5 registro(s), com versões afetadas e correções.cpe:2.3:o:tp-link:fr365_firmware
CVE-2025-9290
Média · 5.9
CWE-760 22/01/2026
Authentication Weakness on Omada Controllers, Gateways and Access Points
An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values. Exploitation requires advanced network positioning and allows an attacker to intercept adoption traffic and forge valid authentication through offline precomputation, potentially exposing sensitive information and compromising confidentiality.
CVE-2025-7851
Crítica · 9.8
CWE-269 20/10/2025
Unauthorized root access via debug functionality
An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways.
CVE-2025-7850
Alta · 7.2
CWE-78 20/10/2025
Authenticated OS command execution
A command injection vulnerability may be exploited after the admin's authentication on the web portal on Omada gateways.
CVE-2025-6542
Crítica · 9.8
CWE-78 20/10/2025
OS command injection in multiple parameters
An arbitrary OS command may be executed on the product by a remote unauthenticated attacker.
CVE-2025-6541
Alta · 8.8
CWE-78 20/10/2025
OS command injection using information obtained from the web management interface
An arbitrary OS command may be executed on the product by the user who can log in to the web management interface.