← CVE Intelligence

CVE-2025-7851

Unauthorized root access via debug functionality PUBLISHED

Description (CNA)

An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways.

Affected (CNA)

Vendor / productVersions
TP-Link Systems Inc. / Omada gatewaysaffected 0 before ER8411 1.3.3, ER7412-M2 1.1.0, ER707-M2 1.3.1, ER7206 2.2.2, ER605 2.3.1, ER706W 1.2.1, ER706W-4G 1.2.1, ER7212PC 2.1.3
TP-Link Systems Inc. / Festa gatewaysaffected 0 before FR365 1.1.10, FR205 1.0.3, FR307 1.2.5
TP-Link Systems Inc. / Omada Pro gatewaysaffected 0 before G36 1.1.4, G611 1.2.2

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.