CVE-2025-7850 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2025-7850

Modified

More Info Official Page

Source-f23511db-6c3e-4e32-a477-6aa17d310630

Published At-21 Oct, 2025 | 01:15

Updated At-24 Oct, 2025 | 17:15

A command injection vulnerability may be exploited after the admin's authentication on the web portal on Omada gateways.

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	9.3	CRITICAL	CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary	3.1	7.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 4.0

Base score: 9.3

Base severity: CRITICAL

Vector:

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Type: Primary

Version: 3.1

Base score: 7.2

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CPE Matches

TP-Link Systems Inc.

>>er8411_firmware>>Versions before 1.3.3(exclusive)

cpe:2.3:o:tp-link:er8411_firmware:*:*:*:*:*:*:*:*

TP-Link Systems Inc.

>>er8411_firmware>>1.3.3

cpe:2.3:o:tp-link:er8411_firmware:1.3.3:-:*:*:*:*:*:*

TP-Link Systems Inc.

cpe:2.3:h:tp-link:er8411:-:*:*:*:*:*:*:*

TP-Link Systems Inc.

>>er7412-m2_firmware>>Versions before 1.1.0(exclusive)

cpe:2.3:o:tp-link:er7412-m2_firmware:*:*:*:*:*:*:*:*

TP-Link Systems Inc.

>>er7412-m2_firmware>>1.1.0

cpe:2.3:o:tp-link:er7412-m2_firmware:1.1.0:-:*:*:*:*:*:*

TP-Link Systems Inc.

cpe:2.3:h:tp-link:er7412-m2:-:*:*:*:*:*:*:*

TP-Link Systems Inc.

>>er707-m2_firmware>>Versions before 1.3.1(exclusive)

cpe:2.3:o:tp-link:er707-m2_firmware:*:*:*:*:*:*:*:*

TP-Link Systems Inc.

>>er707-m2_firmware>>1.3.1

cpe:2.3:o:tp-link:er707-m2_firmware:1.3.1:-:*:*:*:*:*:*

TP-Link Systems Inc.

cpe:2.3:h:tp-link:er707-m2:-:*:*:*:*:*:*:*

TP-Link Systems Inc.

>>er7206_firmware>>Versions before 2.2.2(exclusive)

cpe:2.3:o:tp-link:er7206_firmware:*:*:*:*:*:*:*:*

TP-Link Systems Inc.

>>er7206_firmware>>2.2.2

cpe:2.3:o:tp-link:er7206_firmware:2.2.2:-:*:*:*:*:*:*

TP-Link Systems Inc.

cpe:2.3:h:tp-link:er7206:-:*:*:*:*:*:*:*

TP-Link Systems Inc.

>>er605_firmware>>Versions before 2.3.1(exclusive)

cpe:2.3:o:tp-link:er605_firmware:*:*:*:*:*:*:*:*

TP-Link Systems Inc.

>>er605_firmware>>2.3.1

cpe:2.3:o:tp-link:er605_firmware:2.3.1:-:*:*:*:*:*:*

TP-Link Systems Inc.

>>er605>>-

cpe:2.3:h:tp-link:er605:-:*:*:*:*:*:*:*

TP-Link Systems Inc.

>>er706w_firmware>>Versions before 1.2.1(exclusive)

cpe:2.3:o:tp-link:er706w_firmware:*:*:*:*:*:*:*:*

TP-Link Systems Inc.

>>er706w_firmware>>1.2.1

cpe:2.3:o:tp-link:er706w_firmware:1.2.1:-:*:*:*:*:*:*

TP-Link Systems Inc.

cpe:2.3:h:tp-link:er706w:-:*:*:*:*:*:*:*

TP-Link Systems Inc.

>>er706w-4g_firmware>>Versions before 1.2.1(exclusive)

cpe:2.3:o:tp-link:er706w-4g_firmware:*:*:*:*:*:*:*:*

TP-Link Systems Inc.

>>er706w-4g_firmware>>1.2.1

cpe:2.3:o:tp-link:er706w-4g_firmware:1.2.1:-:*:*:*:*:*:*

TP-Link Systems Inc.

cpe:2.3:h:tp-link:er706w-4g:-:*:*:*:*:*:*:*

TP-Link Systems Inc.

>>er7212pc_firmware>>Versions before 2.1.3(exclusive)

cpe:2.3:o:tp-link:er7212pc_firmware:*:*:*:*:*:*:*:*

TP-Link Systems Inc.

>>er7212pc_firmware>>2.1.3

cpe:2.3:o:tp-link:er7212pc_firmware:2.1.3:-:*:*:*:*:*:*

TP-Link Systems Inc.

cpe:2.3:h:tp-link:er7212pc:-:*:*:*:*:*:*:*

TP-Link Systems Inc.

>>g36_firmware>>Versions before 1.1.4(exclusive)

cpe:2.3:o:tp-link:g36_firmware:*:*:*:*:*:*:*:*

TP-Link Systems Inc.

>>g36_firmware>>1.1.4

cpe:2.3:o:tp-link:g36_firmware:1.1.4:-:*:*:*:*:*:*

TP-Link Systems Inc.

>>g36>>-

cpe:2.3:h:tp-link:g36:-:*:*:*:*:*:*:*

TP-Link Systems Inc.

>>g611_firmware>>Versions before 1.2.2(exclusive)

cpe:2.3:o:tp-link:g611_firmware:*:*:*:*:*:*:*:*

TP-Link Systems Inc.

>>g611_firmware>>1.2.2

cpe:2.3:o:tp-link:g611_firmware:1.2.2:-:*:*:*:*:*:*

TP-Link Systems Inc.

>>g611>>-

cpe:2.3:h:tp-link:g611:-:*:*:*:*:*:*:*

TP-Link Systems Inc.

>>fr365_firmware>>Versions before 1.1.10(exclusive)

cpe:2.3:o:tp-link:fr365_firmware:*:*:*:*:*:*:*:*

TP-Link Systems Inc.

>>fr365_firmware>>1.1.10

cpe:2.3:o:tp-link:fr365_firmware:1.1.10:-:*:*:*:*:*:*

TP-Link Systems Inc.

>>fr365>>-

cpe:2.3:h:tp-link:fr365:-:*:*:*:*:*:*:*

TP-Link Systems Inc.

>>fr205_firmware>>Versions before 1.0.3(exclusive)

cpe:2.3:o:tp-link:fr205_firmware:*:*:*:*:*:*:*:*

TP-Link Systems Inc.

>>fr205_firmware>>1.0.3

cpe:2.3:o:tp-link:fr205_firmware:1.0.3:-:*:*:*:*:*:*

TP-Link Systems Inc.

>>fr205>>-

cpe:2.3:h:tp-link:fr205:-:*:*:*:*:*:*:*

TP-Link Systems Inc.

>>fr307-m2_firmware>>Versions before 1.2.5(exclusive)

cpe:2.3:o:tp-link:fr307-m2_firmware:*:*:*:*:*:*:*:*

TP-Link Systems Inc.

>>fr307-m2_firmware>>1.2.5

cpe:2.3:o:tp-link:fr307-m2_firmware:1.2.5:-:*:*:*:*:*:*

TP-Link Systems Inc.

cpe:2.3:h:tp-link:fr307-m2:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-78	Secondary	f23511db-6c3e-4e32-a477-6aa17d310630

CWE ID: CWE-78

Type: Secondary

Source: f23511db-6c3e-4e32-a477-6aa17d310630

References

Hyperlink	Source	Resource
https://support.omadanetworks.com/en/document/108456/	f23511db-6c3e-4e32-a477-6aa17d310630	Vendor Advisory
https://www.forescout.com/blog/new-tp-link-router-vulnerabilities-a-primer-on-rooting-routers/	f23511db-6c3e-4e32-a477-6aa17d310630	N/A
https://www.omadanetworks.com/us/business-networking/all-omada-router/	f23511db-6c3e-4e32-a477-6aa17d310630	Product
https://www.omadanetworks.com/us/business-networking/omada-pro-router-wired-router/	f23511db-6c3e-4e32-a477-6aa17d310630	Product
https://www.tp-link.com/us/business-networking/soho-festa-gateway/	f23511db-6c3e-4e32-a477-6aa17d310630	Product

Hyperlink: https://support.omadanetworks.com/en/document/108456/

Source: f23511db-6c3e-4e32-a477-6aa17d310630

Resource:

Vendor Advisory

Hyperlink: https://www.forescout.com/blog/new-tp-link-router-vulnerabilities-a-primer-on-rooting-routers/

Source: f23511db-6c3e-4e32-a477-6aa17d310630

Resource: N/A

Hyperlink: https://www.omadanetworks.com/us/business-networking/all-omada-router/

Source: f23511db-6c3e-4e32-a477-6aa17d310630

Resource:

Product

Hyperlink: https://www.omadanetworks.com/us/business-networking/omada-pro-router-wired-router/

Source: f23511db-6c3e-4e32-a477-6aa17d310630

Resource:

Product

Hyperlink: https://www.tp-link.com/us/business-networking/soho-festa-gateway/

Source: f23511db-6c3e-4e32-a477-6aa17d310630

Resource:

Product