CVE-2025-7850

🗓️ 21 Oct 2025 00:28:11Reported by TPLinkType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 16 Views

Authenticated command injection enables OS command execution after admin login on the Omada gateways web portal.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-7850	21 Oct 202501:33	–	circl
CNNVD	TP-Link Omada gateways 安全漏洞	21 Oct 202500:00	–	cnnvd
Cvelist	CVE-2025-7850 Authenticated OS command execution	21 Oct 202500:28	–	cvelist
EUVD	EUVD-2025-35116	21 Oct 202500:28	–	euvd
NVD	CVE-2025-7850	21 Oct 202501:15	–	nvd
RedhatCVE	CVE-2025-7850	22 Oct 202501:12	–	redhatcve
The Hacker News	TP-Link Patches Four Omada Gateway Flaws, Two Allow Remote Code Execution	22 Oct 202504:38	–	thn
Vulnrichment	CVE-2025-7850 Authenticated OS command execution	21 Oct 202500:28	–	vulnrichment

NVD

Node

tp-link er8411_firmwareRange<1.3.3

tp-link er8411_firmwareMatch1.3.3-

AND

tp-link er8411Match-

Node

tp-link er7412-m2_firmwareRange<1.1.0

tp-link er7412-m2_firmwareMatch1.1.0-

AND

tp-link er7412-m2Match-

Node

tp-link er707-m2_firmwareRange<1.3.1

tp-link er707-m2_firmwareMatch1.3.1-

AND

tp-link er707-m2Match-

Node

tp-link er7206_firmwareRange<2.2.2

tp-link er7206_firmwareMatch2.2.2-

AND

tp-link er7206Match-

Node

tp-link er605_firmwareRange<2.3.1

tp-link er605_firmwareMatch2.3.1-

AND

tp-link er605Match-

Node

tp-link er706w_firmwareRange<1.2.1

tp-link er706w_firmwareMatch1.2.1-

AND

tp-link er706wMatch-

Node

tp-link er706w-4g_firmwareRange<1.2.1

tp-link er706w-4g_firmwareMatch1.2.1-

AND

tp-link er706w-4gMatch-

Node

tp-link er7212pc_firmwareRange<2.1.3

tp-link er7212pc_firmwareMatch2.1.3-

AND

tp-link er7212pcMatch-

Node

tp-link g36_firmwareRange<1.1.4

tp-link g36_firmwareMatch1.1.4-

AND

tp-link g36Match-

Node

tp-link g611_firmwareRange<1.2.2

tp-link g611_firmwareMatch1.2.2-

AND

tp-link g611Match-

Node

tp-link fr365_firmwareRange<1.1.10

tp-link fr365_firmwareMatch1.1.10-

AND

tp-link fr365Match-

Node

tp-link fr205_firmwareRange<1.0.3

tp-link fr205_firmwareMatch1.0.3-

AND

tp-link fr205Match-

Node

tp-link fr307-m2_firmwareRange<1.2.5

tp-link fr307-m2_firmwareMatch1.2.5-

AND

tp-link fr307-m2Match-

[
  {
    "defaultStatus": "unknown",
    "product": "Omada gateways",
    "vendor": "TP-Link Systems Inc.",
    "versions": [
      {
        "lessThan": "ER8411 1.3.3, ER7412-M2 1.1.0, ER707-M2 1.3.1, ER7206 2.2.2, ER605 2.3.1, ER706W 1.2.1, ER706W-4G 1.2.1, ER7212PC 2.1.3",
        "status": "affected",
        "version": "0",
        "versionType": "Firmware"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Festa gateways",
    "vendor": "TP-Link Systems Inc.",
    "versions": [
      {
        "lessThan": "FR365 1.1.10, FR205 1.0.3, FR307 1.2.5",
        "status": "affected",
        "version": "0",
        "versionType": "Firmware"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Omada Pro gateways",
    "vendor": "TP-Link Systems Inc.",
    "versions": [
      {
        "lessThan": "G36 1.1.4, G611 1.2.2",
        "status": "affected",
        "version": "0",
        "versionType": "Firmware"
      }
    ]
  }
]

Source	Link
tp-link	www.tp-link.com/us/business-networking/soho-festa-gateway/
forescout	www.forescout.com/blog/new-tp-link-router-vulnerabilities-a-primer-on-rooting-routers/
omadanetworks	www.omadanetworks.com/us/business-networking/omada-pro-router-wired-router/
omadanetworks	www.omadanetworks.com/us/business-networking/all-omada-router/
support	www.support.omadanetworks.com/en/document/108456/

17 Jun 2026 10:05Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.2

CVSS 49.3

EPSS0.02171

SSVC

CWE-78