CVE-2024-25139: TP-Link Omada ER605 Firmware

Critical severity, CVSS 10.0. EPSS: 0.9% chance of exploitation in the next 30 days.

In TP-Link Omada er605 1.0.1 through (v2.6) 2.2.3, a cloud-brd binary is susceptible to an integer overflow that leads to a heap-based buffer overflow. After heap shaping, an attacker can achieve code execution in the context of the cloud-brd binary that runs at the root level. This is fixed in ER605(UN)_v2_2.2.4 Build 020240119.

Affected products

• TP-Link Omada ER605 Firmware: from 1.0, up to and including 2.2.3

Published 2024-03-14. Last modified 2026-06-17.