ГлавнаяУязвимости → CVE-2025-7851
9.8критическая

CVE-2025-7851

Описание

An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways.

Затрагиваемое ПО
Tp-link Fr307-m2 firmwareTp-link Fr307-m2Tp-link Fr205 firmwareTp-link Fr205Tp-link Fr365 firmwareTp-link Fr365Tp-link G611 firmwareTp-link G611Tp-link G36 firmwareTp-link G36Tp-link Er7212pc firmwareTp-link Er7212pcTp-link Er706w-4g firmwareTp-link Er706w-4gTp-link Er706w firmwareTp-link Er706wTp-link Er605 firmwareTp-link Er605Tp-link Er7206 firmwareTp-link Er7206Tp-link Er707-m2 firmwareTp-link Er707-m2Tp-link Er7412-m2 firmwareTp-link Er7412-m2Tp-link Er8411 firmware
CVSS
Балл9.8 — критическая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Источники
https://support.omadanetworks.com/en/document/108456/https://www.forescout.com/blog/new-tp-link-router-vulnerabilities-a-primer-on-rooting-routers/https://www.omadanetworks.com/us/business-networking/all-omada-router/https://www.omadanetworks.com/us/business-networking/omada-pro-router-wired-router/https://www.tp-link.com/us/business-networking/soho-festa-gateway/