CVE-2025-7375mediumCWE-20

CVE-2025-7375: medium-severity vulnerability in TP-Link Systems Inc. EAP610 v3

Unauthenticated Denial-of-Service Vulnerability in Omada EAP610

Published · Updated

Follow this CVE+ Monitor EAP610

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.9epss 0.2%
A denial-of-service (DoS) vulnerability was identified in Omada EAP610 v3. An attacker with adjacent network access can send crafted requests to cause the device’s HTTP service to crash. This results in temporary service unavailability until the device is rebooted. This issue affects Omada EAP610 firmware versions prior to 1.6.0.
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected products
TP-Link Systems Inc. · EAP610 v3