Er707 M2 Firmware

er707-m2_firmware

Vendor: Tp Link • 5 CVEs

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-9290 1Tp Link 56Beam Bridge 5 Ur Firmware Dr3220v 4g FirmwareDr3650v 4g Firmware+53 more Mar 16, 2026 Jan 23, 2026 6.0 MEDIUM· v4 5.9 MEDIUM· v3 N/A· v2 An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values. Exploitation requires advanced network positioning and all...Show more An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values. Exploitation requires advanced network positioning and allows an attacker to intercept adoption traffic and forge valid authentication through offline precomputation, potentially exposing sensitive information and compromising confidentiality.Show less
CVE-2025-7851 1Tp Link 13Er605 Firmware Er706w 4g FirmwareEr706w Firmware+10 more Oct 24, 2025 Oct 21, 2025 8.7 HIGH· v4 9.8 CRITICAL· v3 N/A· v2 An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways.
CVE-2025-7850 1Tp Link 13Er605 Firmware Er706w 4g FirmwareEr706w Firmware+10 more Oct 24, 2025 Oct 21, 2025 9.3 CRITICAL· v4 7.2 HIGH· v3 N/A· v2 A command injection vulnerability may be exploited after the admin's authentication on the web portal on Omada gateways.
CVE-2025-6542 1Tp Link 13Er605 Firmware Er706w 4g FirmwareEr706w Firmware+10 more Oct 24, 2025 Oct 21, 2025 9.3 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 An arbitrary OS command may be executed on the product by a remote unauthenticated attacker.
CVE-2025-6541 1Tp Link 13Er605 Firmware Er706w 4g FirmwareEr706w Firmware+10 more Oct 24, 2025 Oct 21, 2025 8.6 HIGH· v4 8.8 HIGH· v3 N/A· v2 An arbitrary OS command may be executed on the product by the user who can log in to the web management interface.