« Volver al listado

CVE-2025-9292

Estado: AnalizadaBaja (2)—

A permissive web security configuration may allow cross-origin restrictions enforced by modern browsers to be bypassed under specific circumstances. Exploitation requires the presence of an existing client-side injection vulnerability and user access to the affected web interface. Successful exploitation could allow unauthorized disclosure of sensitive information. Fixed in updated Omada Cloud Controller service versions deployed automatically by TP‑Link. No user action is required.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (14)

Tp-link — AginetTp-link — DecoTp-link — FestaTp-link — KasaTp-link — KidshieldTp-link — OmadaTp-link — Omada GuardTp-link — TapoTp-link — TetherTp-link — Tp-partnerTp-link — TpcameraTp-link — VigiTp-link — Wi-fi NaviTp-link — Wifi Toolkit

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-9292",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-9292",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-02-13T13:18:18.233135Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ],
    "cvssMetricV40": [
      {
        "type": "Secondary",
        "source": "f23511db-6c3e-4e32-a477-6aa17d310630",
        "cvssData": {
          "Safety": "NOT_DEFINED",
          "version": "4.0",
          "Recovery": "NOT_DEFINED",
          "baseScore": 2,
          "Automatable": "NOT_DEFINED",
          "attackVector": "NETWORK",
          "baseSeverity": "LOW",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "exploitMaturity": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED",
          "userInteraction": "PASSIVE",
          "attackComplexity": "LOW",
          "attackRequirements": "PRESENT",
          "privilegesRequired": "HIGH",
          "subIntegrityImpact": "NONE",
          "vulnIntegrityImpact": "NONE",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "vulnAvailabilityImpact": "NONE",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "subConfidentialityImpact": "NONE",
          "vulnConfidentialityImpact": "LOW",
          "confidentialityRequirement": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED"
        }
      }
    ]
  },
  "affected": [
    {
      "source": "f23511db-6c3e-4e32-a477-6aa17d310630",
      "affectedData": [
        {
          "vendor": "TP-Link Systems Inc.",
          "product": "Omada Cloud Controller",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Omada"
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2026-02-13T02:16:45.937",
  "references": [
    {
      "url": "https://www.omadanetworks.com/us/support/faq/4969/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "f23511db-6c3e-4e32-a477-6aa17d310630"
    },
    {
      "url": "https://www.tp-link.com/us/support/faq/4969/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "f23511db-6c3e-4e32-a477-6aa17d310630"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "f23511db-6c3e-4e32-a477-6aa17d310630",
      "description": [
        {
          "lang": "en",
          "value": "CWE-942"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A permissive web security configuration may allow cross-origin restrictions enforced by modern browsers to be bypassed under specific circumstances.  Exploitation requires the presence of an existing client-side injection vulnerability and user access to the affected web interface.  Successful exploitation could allow unauthorized disclosure of sensitive information. Fixed in updated Omada Cloud Controller service versions deployed automatically by TP‑Link. No user action is required."
    },
    {
      "lang": "es",
      "value": "Una configuración de seguridad web permisiva puede permitir que las restricciones de origen cruzado impuestas por los navegadores modernos sean eludidas bajo circunstancias específicas. La explotación requiere la presencia de una vulnerabilidad de inyección del lado del cliente existente y acceso de usuario a la interfaz web afectada. La explotación exitosa podría permitir la divulgación no autorizada de información sensible. Corregido en versiones actualizadas del servicio Omada Cloud Controller desplegadas automáticamente por TP?Link. No se requiere ninguna acción del usuario."
    }
  ],
  "lastModified": "2026-06-17T10:08:41.327",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:tp-link:aginet:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "917B801C-D1EE-498D-9D89-7CD6FDF22096",
              "versionEndExcluding": "2.13.6"
            },
            {
              "criteria": "cpe:2.3:a:tp-link:deco:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "74600A45-B793-4C34-9C72-8BAED1555097",
              "versionEndExcluding": "3.9.163"
            },
            {
              "criteria": "cpe:2.3:a:tp-link:festa:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8C4235A8-87CF-48F8-B0BD-96124FDA850B",
              "versionEndExcluding": "1.7.1"
            },
            {
              "criteria": "cpe:2.3:a:tp-link:kasa:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "27D5C0B8-67C4-440B-A0B5-B0B4E8126DC5",
              "versionEndExcluding": "3.4.350"
            },
            {
              "criteria": "cpe:2.3:a:tp-link:kidshield:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E50BF815-D85D-437C-891E-61B49F6E9AC5",
              "versionEndExcluding": "1.1.21"
            },
            {
              "criteria": "cpe:2.3:a:tp-link:omada:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6B2DD98D-424D-453A-B472-9E7349E4B887",
              "versionEndExcluding": "4.25.25"
            },
            {
              "criteria": "cpe:2.3:a:tp-link:omada_guard:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1EE9425F-E87A-4C39-8F4D-3CEEC10B92D6",
              "versionEndExcluding": "1.1.28"
            },
            {
              "criteria": "cpe:2.3:a:tp-link:tapo:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "857482B8-F8BA-4F53-BE48-55FC91FD32CF",
              "versionEndExcluding": "3.14.111"
            },
            {
              "criteria": "cpe:2.3:a:tp-link:tether:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "50BFDEFF-D76D-4AAB-8DDB-4620F5584A08",
              "versionEndExcluding": "4.12.27"
            },
            {
              "criteria": "cpe:2.3:a:tp-link:tp-partner:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "682309A2-16A9-483F-A789-0C1A412A7005",
              "versionEndExcluding": "2.0.1"
            },
            {
              "criteria": "cpe:2.3:a:tp-link:tpcamera:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BE3C3AA7-1F72-466B-B0AA-F26D43E4A301",
              "versionEndExcluding": "3.2.17"
            },
            {
              "criteria": "cpe:2.3:a:tp-link:vigi:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3563E8AC-D931-4C07-BD5F-D35DB9BC8456",
              "versionEndExcluding": "2.7.70"
            },
            {
              "criteria": "cpe:2.3:a:tp-link:wi-fi_navi:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "51EF281C-A391-49C2-A826-F2C2E46D820D",
              "versionEndExcluding": "1.5.5"
            },
            {
              "criteria": "cpe:2.3:a:tp-link:wifi_toolkit:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BFD2DCF8-1D59-478F-868D-3D503D68B009",
              "versionEndExcluding": "1.4.28"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "f23511db-6c3e-4e32-a477-6aa17d310630"
}