CVE-2021-44032

TP-Link Omada SDN Software Controller before 5.0.15 does not check if the authentication method specified in a connection request is allowed. An attacker can bypass the captive portal authentication process by using the downgraded "no authentication" method, and access the protected network. For...

PT-2022-1817

Name of the Vulnerable Software and Affected Versions TP-Link Omada SDN Software Controller versions prior to 5.0.15 Description The issue is related to errors in processing authentication requests in the TP-Link Omada SDN software controller. This can allow a remote attacker to gain access to a...

CVE-2021-44032: Undefined Security Weakness

TP-Link Omada SDN Software Controller before 5.0.15 does not check if the authentication method specified in a connection request is allowed. An attacker can bypass the captive portal authentication process by using the downgraded "no authentication" method, and access the protected network. For...