Multiple Vulnerabilities Found in TP-Link Omada Products

• •Multiple vulnerabilities in TP-Link Omada products allow for sensitive information disclosure.
• •Attackers can exploit these vulnerabilities using guessed serial numbers to access device details.
• •Users are urged to apply vendor-issued patches to protect against potential exploits.

Forescout's Vedere Labs identified multiple vulnerabilities in TP-Link Omada products, including security restriction bypass and sensitive information disclosure. Attackers can exploit these vulnerabilities using a guessed serial number to retrieve device MAC addresses and models from the Omada cloud service. Specifically, serials beginning with 22460J500 and 224608100 correspond to ER605 and ER7206 routers, respectively. The vulnerabilities allow for potential spoofing and unauthorized access to sensitive information. Users are advised to apply the fixes issued by TP-Link to mitigate these risks. The vulnerabilities affect a range of Omada products, posing a significant threat to users' network security.