PT-2018-9729

Name of the Vulnerable Software and Affected Versions: TP-Link EAP Controller and Omada Controller versions 2.5.4 Windows through 2.6.0 Windows Description: The issue concerns the encryption of the web application backup file, which uses a hard-coded cryptographic key. This allows anyone with...

PT-2018-9727

Name of the Vulnerable Software and Affected Versions: TP-Link EAP Controller and Omada Controller versions 2.5.4 Windows through 2.6.0 Windows Description: A stored Cross-site scripting XSS issue allows authenticated attackers to inject arbitrary web script or HTML via the userName parameter in...

PT-2018-9730

Name of the Vulnerable Software and Affected Versions: TP-Link EAP Controller and Omada Controller versions 2.5.4 Windows through 2.6.0 Windows Description: The issue allows a low-privilege user to make any request as an Administrator due to the lack of privilege control for the usage of the Web...

PT-2018-9726

Name of the Vulnerable Software and Affected Versions: TP-Link EAP Controller and Omada Controller versions 2.5.4 Windows through 2.6.0 Windows Description: A stored Cross-site scripting XSS issue allows authenticated attackers to inject arbitrary web script or HTML via the portalPictureUpload...