<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: omada oc300 firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-15630: A race
condition exists in the cloud-based Omada device adoption process when an
attacker may be able to inter</title><link>https://patchthecve.com/cve/CVE-2025-15630.html</link><guid>https://patchthecve.com/cve/CVE-2025-15630.html</guid><pubDate>Tue, 29 Sep 2026 14:10:00 +0000</pubDate><description>MEDIUM 5.9: A race
condition exists in the cloud-based Omada device adoption process when an
attacker may be able to interact with the adoption workflow before a legitimate
device completes registration, resulting in provisioning information being
delivered to an attacker.









Successful
exploitation may a</description></item><item><title>CVE-2025-15629: A cryptographic
weakness exists in the Omada adoption protocol where session encryption keys
used to protect c</title><link>https://patchthecve.com/cve/CVE-2025-15629.html</link><guid>https://patchthecve.com/cve/CVE-2025-15629.html</guid><pubDate>Tue, 29 Sep 2026 14:10:00 +0000</pubDate><description>HIGH 7.5: A cryptographic
weakness exists in the Omada adoption protocol where session encryption keys
used to protect communications between controllers and managed devices may be
predictable due to insufficient entropy in session key generation.









An attacker
who successfully intercepts adoption-rela</description></item><item><title>CVE-2025-15628: Affected
Omada devices rely on embedded certificates that are shared across deployments
to establish trust bet</title><link>https://patchthecve.com/cve/CVE-2025-15628.html</link><guid>https://patchthecve.com/cve/CVE-2025-15628.html</guid><pubDate>Tue, 29 Sep 2026 14:10:00 +0000</pubDate><description>HIGH 7.5: Affected
Omada devices rely on embedded certificates that are shared across deployments
to establish trust between controllers and managed devices.









An attacker
who obtains the embedded certificates may be able to impersonate trusted
controllers or devices and intercept affected communicatio</description></item><item><title>CVE-2025-15627: A cryptographic
weakness exists in the Omada adoption protocol. 
The protocol relies on hard-coded cryptograph</title><link>https://patchthecve.com/cve/CVE-2025-15627.html</link><guid>https://patchthecve.com/cve/CVE-2025-15627.html</guid><pubDate>Tue, 29 Sep 2026 14:10:00 +0000</pubDate><description>HIGH 7.5: A cryptographic
weakness exists in the Omada adoption protocol. 
The protocol relies on hard-coded cryptographic keys to establish trust and
protect authentication exchanges between controllers and managed devices during
device adoption.









An attacker may
be able to impersonate trusted contro</description></item><item><title>CVE-2025-15544: A cryptographic
weakness exists in the Omada device adoption process.  During adoption, authentication credent</title><link>https://patchthecve.com/cve/CVE-2025-15544.html</link><guid>https://patchthecve.com/cve/CVE-2025-15544.html</guid><pubDate>Tue, 29 Sep 2026 14:10:00 +0000</pubDate><description>MEDIUM 5.9: A cryptographic
weakness exists in the Omada device adoption process.  During adoption, authentication credentials associated
with site management are transmitted using a weak hashing algorithm that does
not provide sufficient protection. 









An attacker who
successfully intercepts adoption-re</description></item></channel></rss>