Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.9

Omada EAP610 Crashes When Sent Malicious Network Requests

CVE-2025-7375 · published 8 months ago
Summary

If an attacker is on the same network as your Omada EAP610, they can crash the device by sending special requests. This will temporarily cut off your access to the device's settings and features. Update to the latest firmware to fix this issue.

What to do
  • Update tp-link omada_eap610_firmware to version 1.6.0 or later.
Affected software
VendorProductAffected versions
tp-link omada_eap610_firmware < 1.6.0
cpe:2.3:o:tp-link:omada_eap610_firmware:*:*:*:*:*:*:*:*
Original advisory text
A denial-of-service (DoS) vulnerability was identified in Omada EAP610 v3. An attacker with adjacent network access can send crafted requests to cause the device’s HTTP service to crash. This res...
A denial-of-service (DoS) vulnerability was identified in Omada EAP610 v3. An attacker with adjacent network access can send crafted requests to cause the device’s HTTP service to crash. This results in temporary service unavailability until the device is rebooted.
This issue affects Omada EAP610 firmware versions prior to 1.6.0.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
6.9 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-20Improper Input Validation
Timeline
Published5 Mar 2026
Updated31 Oct 2026
First seen6 Mar 2026
Sources
CVE-2025-7375 · NVD
Track software like this
Free during beta