CVE-2026-1668
7.7
Vector
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow more
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less
Source: f23511db-6c3e-4e32-a477-6aa17d310630 (Secondary)
Description
The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests. Under specific conditions, this flaw may result in unintended command execution.<br>An unauthenticated attacker with network access to the affected interface may cause memory corruption, service instability, or information disclosure. Successful exploitation may allow remote code execution or denial-of-service.
Affected (61)
Products: Tp Link: Omada Sg2005p Pd Firmware, Omada Sg2008 Firmware, Omada Sg2008p Firmware, Omada Sg2016p Firmware, Omada Sg2210mp Firmware, Omada Sg2210p Firmware, Omada Sg2210xmp M2 Firmware, Omada Sg2218 Firmware, Omada Sg2218p Firmware, Omada Sg2428lp Firmware, Omada Sg2428p Firmware, Omada Sg2452lp Firmware, Omada Sg3210 Firmware, Omada Sg3210xhp M2 Firmware, Omada Sg3210x M2 Firmware, Omada Sg3218xp M2 Firmware, Omada Sg3428 Firmware, Omada Sg3428mp Firmware, Omada Sg3428x Firmware, Omada Sg3428xf Firmware, Omada Sg3428x M2 Firmware, Omada Sg3428xmp Firmware, Omada Sg3428xmpp Firmware, Omada Sg3428xpp M2 Firmware, Omada Sg3452 Firmware, Omada Sg3452p Firmware, Omada Sg3452x Firmware, Omada Sg3452xmpp Firmware, Omada Sg3452xp Firmware, Omada Sl2428p Firmware, Omada Sx3008f Firmware, Omada Sx3016f Firmware, Omada Sx3032f Firmware, Omada Sx3206hpp Firmware, Omada Sx3832 Firmware, Omada Sx3832mpp Firmware, Omada Tl Sg2428p Firmware, Omada Tl Sg3428mp Firmware, Omada Tl Sg3452p Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.0.0 to 1.0.19 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sg2005p Pd | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| From 4.20.0 to 4.20.17 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sg2008 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| From 3.20.0 to 3.20.17 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sg2008p | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.20.0 to 1.20.17 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sg2016p | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| From 4.20.0 to 4.20.18 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sg2210mp | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| From 5.20.0 to 5.20.18 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sg2210p | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.0.0 to 1.0.19 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sg2210xmp M2 | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.20.0 to 1.20.17 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sg2218 | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.20.0 to 1.20.17 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sg2218p | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.0.0 to 1.0.13 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sg2428lp | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| From 5.20.0 to 5.20.20 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sg2428p | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.0.0 to 1.0.13 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sg2452lp | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| From 3.20.0 to 3.20.17 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sg3210 | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| From 3.0.0 to 3.0.21 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sg3210xhp M2 | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.20.0 to 1.20.1 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sg3210x M2 | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.0.0 to 1.0.19 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sg3218xp M2 | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| From 2.30.0 to 2.30.16 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sg3428 | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| From 6.20.0 to 6.20.20 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sg3428mp | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.30.0 to 1.30.17 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sg3428x | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.20.0 to 1.20.16 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sg3428xf | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.20.0 to 1.20.18 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sg3428x M2 | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| From 3.20.0 to 3.20.21 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sg3428xmp | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.0.0 to 1.0.16 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sg3428xmpp | All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.20.0 to 1.20.19 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sg3428xpp M2 | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.20.0 to 1.20.17 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sg3452 | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| From 3.30.0 to 3.30.17 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sg3452p | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.20.0 to 1.20.18 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sg3452x | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.0.0 to 1.0.15 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sg3452xmpp | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| From 2.20.0 to 2.20.20 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sg3452xp | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| From 6.20.0 to 6.20.18 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sl2428p | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.20.0 to 1.20.12 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sx3008f | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.20.0 to 1.20.16 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sx3016f | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.0.0 to 1.0.15 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sx3032f | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.20.0 to 1.20.12 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sx3206hpp | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.0.0 to 1.0.12 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sx3832 | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.0.0 to 1.0.11 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Sx3832mpp | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| From 4.0.0 to 4.0.26 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Tl Sg2428p | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| From 5.0.0 to 5.0.25 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Tl Sg3428mp | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| From 3.0.0 to 3.0.22 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Omada Tl Sg3452p | All versions |
Related CWEs
CWE-20
Improper Input Validation
The product receives input or data, but it does
not validate or incorrectly validates that the input has the
properties that are required to process the data safely and
correctly.
CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
References (4)
Source: f23511db-6c3e-4e32-a477-6aa17d310630
Product
Source: f23511db-6c3e-4e32-a477-6aa17d310630
Product
Source: f23511db-6c3e-4e32-a477-6aa17d310630
Vendor Advisory
Timeline
No history available yet.