Omada EAP610 Crashes When Sent Malicious Network Requests

Summary

If an attacker is on the same network as your Omada EAP610, they can crash the device by sending special requests. This will temporarily cut off your access to the device's settings and features. Update to the latest firmware to fix this issue.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
tp-link	omada_eap610_firmware	<= 1.6.0	–

Original title

A denial-of-service (DoS) vulnerability was identified in Omada EAP610 v3. An attacker with adjacent network access can send crafted requests to cause the device’s HTTP service to crash. This res...

Original description

A denial-of-service (DoS) vulnerability was identified in Omada EAP610 v3. An attacker with adjacent network access can send crafted requests to cause the device’s HTTP service to crash. This results in temporary service unavailability until the device is rebooted.
This issue affects Omada EAP610 firmware versions prior to 1.6.0.

nvd CVSS4.0 6.9

Vulnerability type

CWE-20 Improper Input Validation