NVD

CVE-2025-7851 Detail

Modified

This CVE record has been updated after NVD enrichment efforts were completed. Enrichment data supplied by the NVD may require amendment due to these changes.

Description

An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways.

Metrics

NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.

CVSS 4.0 Severity and Vector Strings:

NIST: NVD

N/A

NVD assessment not yet provided.

Nist CVSS score does not match with CNA score

CNA: TPLink

CVSS-B 8.7 HIGH

Vector: CVSS:4.0/AV:A/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H

CVSS 3.x Severity and Vector Strings:

NIST: NVD

Base Score: 9.8 CRITICAL

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS 2.0 Severity and Vector Strings:

National Institute of Standards and Technology

NIST: NVD

Base Score: N/A

NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL	Source(s)	Tag(s)
https://support.omadanetworks.com/en/document/108456/	TPLink	Vendor Advisory
https://www.forescout.com/blog/new-tp-link-router-vulnerabilities-a-primer-on-rooting-routers/	TPLink
https://www.omadanetworks.com/us/business-networking/all-omada-router/	TPLink	Product
https://www.omadanetworks.com/us/business-networking/omada-pro-router-wired-router/	TPLink	Product
https://www.tp-link.com/us/business-networking/soho-festa-gateway/	TPLink	Product

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-269	Improper Privilege Management	CISA-ADP

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Denotes Vulnerable Software
Are we missing a CPE here? Please let us know.

Change History

5 change records found show changes

Reanalysis by NIST 10/24/2025 9:03:27 AM

Action	Type	Old Value	New Value
Changed	CPE Configuration	AND OR cpe:2.3:o:tp-link:g36_firmware::::::::* versions up to (excluding) 1.1.4_build_20251015_rel.84206 OR cpe:2.3:h:tp-link:g36:-:::::::*	AND OR cpe:2.3:o:tp-link:er605_firmware::::::::* versions up to (excluding) 2.3.1 cpe:2.3:o:tp-link:er605_firmware:2.3.1:-::::::* OR cpe:2.3:h:tp-link:er605:-:::::::*
Changed	CPE Configuration	AND OR cpe:2.3:o:tp-link:g36_firmware::::::::* versions up to (excluding) 1.1.4_build_20251015_rel.84206 OR cpe:2.3:h:tp-link:g36:-:::::::*	AND OR cpe:2.3:o:tp-link:er605_firmware::::::::* versions up to (excluding) 2.3.1 cpe:2.3:o:tp-link:er605_firmware:2.3.1:-::::::* OR cpe:2.3:h:tp-link:er605:-:::::::*
Changed	CPE Configuration	AND OR cpe:2.3:o:tp-link:er706w-4g_firmware::::::::* versions up to (excluding) 1.2.1_build_20250821_rel.82492 OR cpe:2.3:h:tp-link:er706w-4g:-:::::::*	AND OR cpe:2.3:o:tp-link:er706w-4g_firmware::::::::* versions up to (excluding) 1.2.1 cpe:2.3:o:tp-link:er706w-4g_firmware:1.2.1:-::::::* OR cpe:2.3:h:tp-link:er706w-4g:-:::::::*
Changed	CPE Configuration	AND OR cpe:2.3:o:tp-link:er7212pc_firmware::::::::* versions up to (excluding) 2.1.3_build_20251016_rel.82571 OR cpe:2.3:h:tp-link:er7212pc:-:::::::*	AND OR cpe:2.3:o:tp-link:er706w_firmware::::::::* versions up to (excluding) 1.2.1 cpe:2.3:o:tp-link:er706w_firmware:1.2.1:-::::::* OR cpe:2.3:h:tp-link:er706w:-:::::::*
Changed	CPE Configuration	AND OR cpe:2.3:o:tp-link:er7212pc_firmware::::::::* versions up to (excluding) 2.1.3_build_20251016_rel.82571 OR cpe:2.3:h:tp-link:er7212pc:-:::::::*	AND OR cpe:2.3:o:tp-link:er706w_firmware::::::::* versions up to (excluding) 1.2.1 cpe:2.3:o:tp-link:er706w_firmware:1.2.1:-::::::* OR cpe:2.3:h:tp-link:er706w:-:::::::*
Changed	CPE Configuration	AND OR cpe:2.3:o:tp-link:fr365_firmware::::::::* versions up to (excluding) 1.1.10_build_20250626_rel.81746 OR cpe:2.3:h:tp-link:fr365:-:::::::*	AND OR cpe:2.3:o:tp-link:er707-m2_firmware::::::::* versions up to (excluding) 1.3.1 cpe:2.3:o:tp-link:er707-m2_firmware:1.3.1:-::::::* OR cpe:2.3:h:tp-link:er707-m2:-:::::::*
Changed	CPE Configuration	AND OR cpe:2.3:o:tp-link:fr365_firmware::::::::* versions up to (excluding) 1.1.10_build_20250626_rel.81746 OR cpe:2.3:h:tp-link:fr365:-:::::::*	AND OR cpe:2.3:o:tp-link:er707-m2_firmware::::::::* versions up to (excluding) 1.3.1 cpe:2.3:o:tp-link:er707-m2_firmware:1.3.1:-::::::* OR cpe:2.3:h:tp-link:er707-m2:-:::::::*
Changed	CPE Configuration	AND OR cpe:2.3:o:tp-link:g611_firmware::::::::* versions up to (excluding) 1.2.2_build_20251017_rel.45512 OR cpe:2.3:h:tp-link:g611:-:::::::*	AND OR cpe:2.3:o:tp-link:er7206_firmware::::::::* versions up to (excluding) 2.2.2 cpe:2.3:o:tp-link:er7206_firmware:2.2.2:-::::::* OR cpe:2.3:h:tp-link:er7206:-:::::::*
Changed	CPE Configuration	AND OR cpe:2.3:o:tp-link:g611_firmware::::::::* versions up to (excluding) 1.2.2_build_20251017_rel.45512 OR cpe:2.3:h:tp-link:g611:-:::::::*	AND OR cpe:2.3:o:tp-link:er7206_firmware::::::::* versions up to (excluding) 2.2.2 cpe:2.3:o:tp-link:er7206_firmware:2.2.2:-::::::* OR cpe:2.3:h:tp-link:er7206:-:::::::*
Changed	CPE Configuration	AND OR cpe:2.3:o:tp-link:er706w_firmware::::::::* versions up to (excluding) 1.2.1_build_20250821_rel.80909 OR cpe:2.3:h:tp-link:er706w:-:::::::*	AND OR cpe:2.3:o:tp-link:er7212pc_firmware::::::::* versions up to (excluding) 2.1.3 cpe:2.3:o:tp-link:er7212pc_firmware:2.1.3:-::::::* OR cpe:2.3:h:tp-link:er7212pc:-:::::::*
Changed	CPE Configuration	AND OR cpe:2.3:o:tp-link:er706w_firmware::::::::* versions up to (excluding) 1.2.1_build_20250821_rel.80909 OR cpe:2.3:h:tp-link:er706w:-:::::::*	AND OR cpe:2.3:o:tp-link:er7212pc_firmware::::::::* versions up to (excluding) 2.1.3 cpe:2.3:o:tp-link:er7212pc_firmware:2.1.3:-::::::* OR cpe:2.3:h:tp-link:er7212pc:-:::::::*
Changed	CPE Configuration	AND OR cpe:2.3:o:tp-link:fr205_firmware::::::::* versions up to (excluding) 1.0.3_build_20251016_rel.61376 OR cpe:2.3:h:tp-link:fr205:-:::::::*	AND OR cpe:2.3:o:tp-link:er7412-m2_firmware::::::::* versions up to (excluding) 1.1.0 cpe:2.3:o:tp-link:er7412-m2_firmware:1.1.0:-::::::* OR cpe:2.3:h:tp-link:er7412-m2:-:::::::*
Changed	CPE Configuration	AND OR cpe:2.3:o:tp-link:fr205_firmware::::::::* versions up to (excluding) 1.0.3_build_20251016_rel.61376 OR cpe:2.3:h:tp-link:fr205:-:::::::*	AND OR cpe:2.3:o:tp-link:er7412-m2_firmware::::::::* versions up to (excluding) 1.1.0 cpe:2.3:o:tp-link:er7412-m2_firmware:1.1.0:-::::::* OR cpe:2.3:h:tp-link:er7412-m2:-:::::::*
Changed	CPE Configuration	AND OR cpe:2.3:o:tp-link:fr307-m2_firmware::::::::* versions up to (excluding) 1.2.5_build_20251015_rel.76743 OR cpe:2.3:h:tp-link:fr307-m2:-:::::::*	AND OR cpe:2.3:o:tp-link:er8411_firmware::::::::* versions up to (excluding) 1.3.3 cpe:2.3:o:tp-link:er8411_firmware:1.3.3:-::::::* OR cpe:2.3:h:tp-link:er8411:-:::::::*
Changed	CPE Configuration	AND OR cpe:2.3:o:tp-link:fr307-m2_firmware::::::::* versions up to (excluding) 1.2.5_build_20251015_rel.76743 OR cpe:2.3:h:tp-link:fr307-m2:-:::::::*	AND OR cpe:2.3:o:tp-link:er8411_firmware::::::::* versions up to (excluding) 1.3.3 cpe:2.3:o:tp-link:er8411_firmware:1.3.3:-::::::* OR cpe:2.3:h:tp-link:er8411:-:::::::*
Changed	CPE Configuration	AND OR cpe:2.3:o:tp-link:er7412-m2_firmware::::::::* versions up to (excluding) 1.1.0_build_20251015_rel.63594 OR cpe:2.3:h:tp-link:er7412-m2:-:::::::*	AND OR cpe:2.3:o:tp-link:fr205_firmware::::::::* versions up to (excluding) 1.0.3 cpe:2.3:o:tp-link:fr205_firmware:1.0.3:-::::::* OR cpe:2.3:h:tp-link:fr205:-:::::::*
Changed	CPE Configuration	AND OR cpe:2.3:o:tp-link:er7412-m2_firmware::::::::* versions up to (excluding) 1.1.0_build_20251015_rel.63594 OR cpe:2.3:h:tp-link:er7412-m2:-:::::::*	AND OR cpe:2.3:o:tp-link:fr205_firmware::::::::* versions up to (excluding) 1.0.3 cpe:2.3:o:tp-link:fr205_firmware:1.0.3:-::::::* OR cpe:2.3:h:tp-link:fr205:-:::::::*
Changed	CPE Configuration	AND OR cpe:2.3:o:tp-link:er8411_firmware::::::::* versions up to (excluding) 1.3.3_build_20251013_rel.44647 OR cpe:2.3:h:tp-link:er8411:-:::::::*	AND OR cpe:2.3:o:tp-link:fr307-m2_firmware::::::::* versions up to (excluding) 1.2.5 cpe:2.3:o:tp-link:fr307-m2_firmware:1.2.5:-::::::* OR cpe:2.3:h:tp-link:fr307-m2:-:::::::*
Changed	CPE Configuration	AND OR cpe:2.3:o:tp-link:er8411_firmware::::::::* versions up to (excluding) 1.3.3_build_20251013_rel.44647 OR cpe:2.3:h:tp-link:er8411:-:::::::*	AND OR cpe:2.3:o:tp-link:fr307-m2_firmware::::::::* versions up to (excluding) 1.2.5 cpe:2.3:o:tp-link:fr307-m2_firmware:1.2.5:-::::::* OR cpe:2.3:h:tp-link:fr307-m2:-:::::::*
Changed	CPE Configuration	AND OR cpe:2.3:o:tp-link:er707-m2_firmware::::::::* versions up to (excluding) 1.3.1_build_20251009_rel.67687 OR cpe:2.3:h:tp-link:er707-m2:-:::::::*	AND OR cpe:2.3:o:tp-link:fr365_firmware::::::::* versions up to (excluding) 1.1.10 cpe:2.3:o:tp-link:fr365_firmware:1.1.10:-::::::* OR cpe:2.3:h:tp-link:fr365:-:::::::*
Changed	CPE Configuration	AND OR cpe:2.3:o:tp-link:er707-m2_firmware::::::::* versions up to (excluding) 1.3.1_build_20251009_rel.67687 OR cpe:2.3:h:tp-link:er707-m2:-:::::::*	AND OR cpe:2.3:o:tp-link:fr365_firmware::::::::* versions up to (excluding) 1.1.10 cpe:2.3:o:tp-link:fr365_firmware:1.1.10:-::::::* OR cpe:2.3:h:tp-link:fr365:-:::::::*
Changed	CPE Configuration	AND OR cpe:2.3:o:tp-link:er605_firmware::::::::* versions up to (excluding) 2.3.1_build_20251015_rel.78291 OR cpe:2.3:h:tp-link:er605:-:::::::*	AND OR cpe:2.3:o:tp-link:g36_firmware::::::::* versions up to (excluding) 1.1.4 cpe:2.3:o:tp-link:g36_firmware:1.1.4:-::::::* OR cpe:2.3:h:tp-link:g36:-:::::::*
Changed	CPE Configuration	AND OR cpe:2.3:o:tp-link:er605_firmware::::::::* versions up to (excluding) 2.3.1_build_20251015_rel.78291 OR cpe:2.3:h:tp-link:er605:-:::::::*	AND OR cpe:2.3:o:tp-link:g36_firmware::::::::* versions up to (excluding) 1.1.4 cpe:2.3:o:tp-link:g36_firmware:1.1.4:-::::::* OR cpe:2.3:h:tp-link:g36:-:::::::*
Changed	CPE Configuration	AND OR cpe:2.3:o:tp-link:er7206_firmware::::::::* versions up to (excluding) 2.2.2_build_20250724_rel.11109 OR cpe:2.3:h:tp-link:er7206:-:::::::*	AND OR cpe:2.3:o:tp-link:g611_firmware::::::::* versions up to (excluding) 1.2.2 cpe:2.3:o:tp-link:g611_firmware:1.2.2:-::::::* OR cpe:2.3:h:tp-link:g611:-:::::::*
Changed	CPE Configuration	AND OR cpe:2.3:o:tp-link:er7206_firmware::::::::* versions up to (excluding) 2.2.2_build_20250724_rel.11109 OR cpe:2.3:h:tp-link:er7206:-:::::::*	AND OR cpe:2.3:o:tp-link:g611_firmware::::::::* versions up to (excluding) 1.2.2 cpe:2.3:o:tp-link:g611_firmware:1.2.2:-::::::* OR cpe:2.3:h:tp-link:g611:-:::::::*

Initial Analysis by NIST 10/23/2025 3:57:43 PM

Action	Type	New Value
Added	CVSS V3.1	AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Added	CPE Configuration	AND OR cpe:2.3:o:tp-link:er605_firmware::::::::* versions up to (excluding) 2.3.1_build_20251015_rel.78291 OR cpe:2.3:h:tp-link:er605:-:::::::*
Added	CPE Configuration	AND OR cpe:2.3:o:tp-link:er706w-4g_firmware::::::::* versions up to (excluding) 1.2.1_build_20250821_rel.82492 OR cpe:2.3:h:tp-link:er706w-4g:-:::::::*
Added	CPE Configuration	AND OR cpe:2.3:o:tp-link:er706w_firmware::::::::* versions up to (excluding) 1.2.1_build_20250821_rel.80909 OR cpe:2.3:h:tp-link:er706w:-:::::::*
Added	CPE Configuration	AND OR cpe:2.3:o:tp-link:er707-m2_firmware::::::::* versions up to (excluding) 1.3.1_build_20251009_rel.67687 OR cpe:2.3:h:tp-link:er707-m2:-:::::::*
Added	CPE Configuration	AND OR cpe:2.3:o:tp-link:er7206_firmware::::::::* versions up to (excluding) 2.2.2_build_20250724_rel.11109 OR cpe:2.3:h:tp-link:er7206:-:::::::*
Added	CPE Configuration	AND OR cpe:2.3:o:tp-link:er7212pc_firmware::::::::* versions up to (excluding) 2.1.3_build_20251016_rel.82571 OR cpe:2.3:h:tp-link:er7212pc:-:::::::*
Added	CPE Configuration	AND OR cpe:2.3:o:tp-link:er7412-m2_firmware::::::::* versions up to (excluding) 1.1.0_build_20251015_rel.63594 OR cpe:2.3:h:tp-link:er7412-m2:-:::::::*
Added	CPE Configuration	AND OR cpe:2.3:o:tp-link:er8411_firmware::::::::* versions up to (excluding) 1.3.3_build_20251013_rel.44647 OR cpe:2.3:h:tp-link:er8411:-:::::::*
Added	CPE Configuration	AND OR cpe:2.3:o:tp-link:fr205_firmware::::::::* versions up to (excluding) 1.0.3_build_20251016_rel.61376 OR cpe:2.3:h:tp-link:fr205:-:::::::*
Added	CPE Configuration	AND OR cpe:2.3:o:tp-link:fr307-m2_firmware::::::::* versions up to (excluding) 1.2.5_build_20251015_rel.76743 OR cpe:2.3:h:tp-link:fr307-m2:-:::::::*
Added	CPE Configuration	AND OR cpe:2.3:o:tp-link:fr365_firmware::::::::* versions up to (excluding) 1.1.10_build_20250626_rel.81746 OR cpe:2.3:h:tp-link:fr365:-:::::::*
Added	CPE Configuration	AND OR cpe:2.3:o:tp-link:g36_firmware::::::::* versions up to (excluding) 1.1.4_build_20251015_rel.84206 OR cpe:2.3:h:tp-link:g36:-:::::::*
Added	CPE Configuration	AND OR cpe:2.3:o:tp-link:g611_firmware::::::::* versions up to (excluding) 1.2.2_build_20251017_rel.45512 OR cpe:2.3:h:tp-link:g611:-:::::::*
Added	Reference Type	TPLink: https://support.omadanetworks.com/en/document/108456/ Types: Vendor Advisory
Added	Reference Type	TPLink: https://www.omadanetworks.com/us/business-networking/all-omada-router/ Types: Product
Added	Reference Type	TPLink: https://www.omadanetworks.com/us/business-networking/omada-pro-router-wired-router/ Types: Product
Added	Reference Type	TPLink: https://www.tp-link.com/us/business-networking/soho-festa-gateway/ Types: Product

New CVE Received from TPLink 10/20/2025 9:15:37 PM

Action	Type	New Value
Added	Description	An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways.
Added	CVSS V4.0	AV:A/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Added	Reference	https://support.omadanetworks.com/en/document/108456/
Added	Reference	https://www.omadanetworks.com/us/business-networking/all-omada-router/
Added	Reference	https://www.omadanetworks.com/us/business-networking/omada-pro-router-wired-router/
Added	Reference	https://www.tp-link.com/us/business-networking/soho-festa-gateway/

Quick Info

CVE Dictionary Entry:
CVE-2025-7851
NVD Published Date:
10/20/2025
NVD Last Modified:
10/24/2025
Source:
TPLink

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

National Vulnerability Database

National Vulnerability Database

CVE-2025-7851 Detail

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Change History

CVE Modified by TPLink 10/24/2025 1:15:43 PM

Reanalysis by NIST 10/24/2025 9:03:27 AM

Initial Analysis by NIST 10/23/2025 3:57:43 PM

CVE Modified by CISA-ADP 10/21/2025 10:15:48 AM

New CVE Received from TPLink 10/20/2025 9:15:37 PM

Quick Info