CVE-2025-9292

A permissive web security configuration may allow cross-origin restrictions enforced by modern browsers to be bypassed under specific circumstances. Exploitation requires the presence of an existing client-side injection vulnerability and user access to the affected web interface. Successful exploitation could allow unauthorized disclosure of sensitive information. Fixed in updated Omada Cloud Controller service versions deployed automatically by TP‑Link. No user action is required.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.omadanetworks.com/us/support/faq/4969/	Vendor Advisory
https://www.tp-link.com/us/support/faq/4969/	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:tp-link:aginet::::::::
	cpe:2.3:a:tp-link:deco::::::::
	cpe:2.3:a:tp-link:festa::::::::
	cpe:2.3:a:tp-link:kasa::::::::
	cpe:2.3:a:tp-link:kidshield::::::::
	cpe:2.3:a:tp-link:omada::::::::
	cpe:2.3:a:tp-link:omada_guard::::::::
	cpe:2.3:a:tp-link:tapo::::::::
	cpe:2.3:a:tp-link:tether::::::::
	cpe:2.3:a:tp-link:tp-partner::::::::
	cpe:2.3:a:tp-link:tpcamera::::::::
	cpe:2.3:a:tp-link:vigi::::::::
	cpe:2.3:a:tp-link:wi-fi_navi::::::::
	cpe:2.3:a:tp-link:wifi_toolkit::::::::

History

No history.

Information

Published : 2026-02-13 02:16

Updated : 2026-06-17 10:08

NVD link : CVE-2025-9292

Mitre link : CVE-2025-9292

CVE.ORG link : CVE-2025-9292

JSON object : View

Products Affected

tp-link

wifi_toolkit
festa
tpcamera
kidshield
aginet
tp-partner
wi-fi_navi
vigi
omada
omada_guard
tether
kasa
deco
tapo

CWE

CWE-942

Permissive Cross-domain Security Policy with Untrusted Domains

{"id": "CVE-2025-9292", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-9292", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-02-13T13:18:18.233135Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "f23511db-6c3e-4e32-a477-6aa17d310630", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 2.0, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "LOW", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "PASSIVE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "HIGH", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "f23511db-6c3e-4e32-a477-6aa17d310630", "affectedData": [{"vendor": "TP-Link Systems Inc.", "product": "Omada Cloud Controller", "versions": [{"status": "affected", "version": "0", "versionType": "custom"}], "platforms": ["Omada"], "defaultStatus": "unaffected"}]}], "published": "2026-02-13T02:16:45.937", "references": [{"url": "https://www.omadanetworks.com/us/support/faq/4969/", "tags": ["Vendor Advisory"], "source": "f23511db-6c3e-4e32-a477-6aa17d310630"}, {"url": "https://www.tp-link.com/us/support/faq/4969/", "tags": ["Vendor Advisory"], "source": "f23511db-6c3e-4e32-a477-6aa17d310630"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "f23511db-6c3e-4e32-a477-6aa17d310630", "description": [{"lang": "en", "value": "CWE-942"}]}], "descriptions": [{"lang": "en", "value": "A permissive web security configuration may allow cross-origin restrictions enforced by modern browsers to be bypassed under specific circumstances. Exploitation requires the presence of an existing client-side injection vulnerability and user access to the affected web interface. Successful exploitation could allow unauthorized disclosure of sensitive information.\u00a0Fixed in updated Omada Cloud Controller service versions deployed automatically by TP\u2011Link. No user action is required."}, {"lang": "es", "value": "Una configuraci\u00f3n de seguridad web permisiva puede permitir que las restricciones de origen cruzado impuestas por los navegadores modernos sean eludidas bajo circunstancias espec\u00edficas. La explotaci\u00f3n requiere la presencia de una vulnerabilidad de inyecci\u00f3n del lado del cliente existente y acceso de usuario a la interfaz web afectada. La explotaci\u00f3n exitosa podr\u00eda permitir la divulgaci\u00f3n no autorizada de informaci\u00f3n sensible. Corregido en versiones actualizadas del servicio Omada Cloud Controller desplegadas autom\u00e1ticamente por TP?Link. No se requiere ninguna acci\u00f3n del usuario."}], "lastModified": "2026-06-17T10:08:41.327", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:tp-link:aginet:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "917B801C-D1EE-498D-9D89-7CD6FDF22096", "versionEndExcluding": "2.13.6"}, {"criteria": "cpe:2.3:a:tp-link:deco:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "74600A45-B793-4C34-9C72-8BAED1555097", "versionEndExcluding": "3.9.163"}, {"criteria": "cpe:2.3:a:tp-link:festa:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8C4235A8-87CF-48F8-B0BD-96124FDA850B", "versionEndExcluding": "1.7.1"}, {"criteria": "cpe:2.3:a:tp-link:kasa:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "27D5C0B8-67C4-440B-A0B5-B0B4E8126DC5", "versionEndExcluding": "3.4.350"}, {"criteria": "cpe:2.3:a:tp-link:kidshield:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E50BF815-D85D-437C-891E-61B49F6E9AC5", "versionEndExcluding": "1.1.21"}, {"criteria": "cpe:2.3:a:tp-link:omada:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6B2DD98D-424D-453A-B472-9E7349E4B887", "versionEndExcluding": "4.25.25"}, {"criteria": "cpe:2.3:a:tp-link:omada_guard:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1EE9425F-E87A-4C39-8F4D-3CEEC10B92D6", "versionEndExcluding": "1.1.28"}, {"criteria": "cpe:2.3:a:tp-link:tapo:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "857482B8-F8BA-4F53-BE48-55FC91FD32CF", "versionEndExcluding": "3.14.111"}, {"criteria": "cpe:2.3:a:tp-link:tether:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "50BFDEFF-D76D-4AAB-8DDB-4620F5584A08", "versionEndExcluding": "4.12.27"}, {"criteria": "cpe:2.3:a:tp-link:tp-partner:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "682309A2-16A9-483F-A789-0C1A412A7005", "versionEndExcluding": "2.0.1"}, {"criteria": "cpe:2.3:a:tp-link:tpcamera:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BE3C3AA7-1F72-466B-B0AA-F26D43E4A301", "versionEndExcluding": "3.2.17"}, {"criteria": "cpe:2.3:a:tp-link:vigi:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3563E8AC-D931-4C07-BD5F-D35DB9BC8456", "versionEndExcluding": "2.7.70"}, {"criteria": "cpe:2.3:a:tp-link:wi-fi_navi:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "51EF281C-A391-49C2-A826-F2C2E46D820D", "versionEndExcluding": "1.5.5"}, {"criteria": "cpe:2.3:a:tp-link:wifi_toolkit:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BFD2DCF8-1D59-478F-868D-3D503D68B009", "versionEndExcluding": "1.4.28"}], "operator": "OR"}]}], "sourceIdentifier": "f23511db-6c3e-4e32-a477-6aa17d310630"}