TP-Link Omada CVE-2025-15629

CWE-331 (Insufficient Entropy) identifies a root cause where cryptographic operations rely on a pseudo-random number generator (PRNG) that produces a predictable or narrow keyspace, allowing an attacker with captured ciphertext to exhaustively recover the plaintext. In the Omada ecosystem, the 'adoption protocol' is the proprietary mechanism by which the Omada Controller (cpe:2.3:a:tp-link_systems_inc:omada_controllers) securely onboards and begins managing network devices: Omada Gateways (cpe:2.3:a:tp-link_systems_inc.:omada_gateways), Omada Switches (cpe:2.3:a:tp-link_systems_inc.:omada_switches), and Omada Access Points (cpe:2.3:a:tp_link_systems_inc.:omada_access_points). The weakness manifests specifically during this adoption handshake phase, meaning the session key protecting that initial - and potentially subsequent - management channel is seeded with insufficient entropy, narrowing the keyspace an attacker must search to recover it. The CVSS 4.0 attack conditions element (AT:P) confirms that specific prerequisites - namely successful traffic interception during the adoption window - must be met, consistent with a timing-dependent cryptographic attack against a short-lived session.