{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-1668", "assignerOrgId": "f23511db-6c3e-4e32-a477-6aa17d310630", "state": "PUBLISHED", "assignerShortName": "TPLink", "dateReserved": "2026-01-29T21:44:58.903Z", "datePublished": "2026-03-13T16:53:23.486Z", "dateUpdated": "2026-03-13T18:09:29.873Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "f23511db-6c3e-4e32-a477-6aa17d310630", "shortName": "TPLink", "dateUpdated": "2026-03-13T16:53:23.486Z"}, "title": "Input Validation Vulnerability on Multiple Omada Switches", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-787", "descriptions": [{"lang": "en", "value": "CAPEC-787 Out-of-Bounds Write"}]}], "affected": [{"vendor": "TP-Link Systems Inc.", "product": "SG2008P 3.2x", "platforms": ["SG2008P(UN) hardware version 3.20", "SG2008P(UN) hardware version 3.26"], "versions": [{"status": "affected", "version": "0", "lessThan": "3.20.17 Build 20260121 Rel.53429", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2008P 3.3x", "platforms": ["SG2008P(UN) hardware version 3.30", "SG2008P(UN) hardware version 3.36", "SG2008P(EU) hardware version 3.36"], "versions": [{"status": "affected", "version": "0", "lessThan": "3.30.1 Build 20260127 Rel.32017", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SX3016F 1.3x", "platforms": ["SX3016F(UN) hardware version 1.30", "SX3016F(UN) hardware version 1.36", "SX3016F(IN) hardware version 1.38"], "packageName": "SX3016F(UN)/(IN) hardware 1.30/1.36/1.38", "versions": [{"status": "affected", "version": "0", "lessThan": "1.30.1 Build 20260129 Rel.8831", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SX3016F 1.2x", "platforms": ["SX3016F(UN) hardware version 1.20", "SX3016F(UN) hardware version 1.26", "SX3016F(IN) hardware version 1.28"], "versions": [{"status": "affected", "version": "0", "lessThan": "1.20.16 Build 20260121 Rel.57953", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3428 2.4x", "platforms": ["SG3428(UN) 2.40", "SG3428(UN) 2.46", "SG3428(BR) 2.46", "SG3428(IN) 2.48"], "versions": [{"status": "affected", "version": "0", "lessThan": "2.40.1 Build 20260127 Rel.39545", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3428XMP 3.3x", "platforms": ["SG3428XMP(UN) 3.30", "SG3428XMP(UN) 3.36", "SG3428XMP(EU) 3.36", "SG3428XMP(IN) 3.38"], "versions": [{"status": "affected", "version": "0", "lessThan": "3.30.1 Build 20260127 Rel.39545", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3428X 1.4x", "platforms": ["SG3428X(UN) 1.40", "SG3428X(UN) 1.46", "SG3428X(EU) 1.46", "SG3428X(IN) 1.48"], "versions": [{"status": "affected", "version": "0", "lessThan": "1.40.1 Build 20260127 Rel.39545", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3428XF 1.3x", "platforms": ["SG3428XF(UN) 1.30", "SG3428XF(UN) 1.36", "SG3428XF(IN) 1.38"], "versions": [{"status": "affected", "version": "0", "lessThan": "1.30.1 Build 20260127 Rel.39545", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3452P 3.4x", "platforms": ["SG3452P(UN) 3.40", "SG3452P(UN) 3.46", "SG3452P(IN) 3.48"], "versions": [{"status": "affected", "version": "0", "lessThan": "3.40.1 Build 20260128 Rel.7041", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3428MP 6.3x", "platforms": ["SG3428MP(UN) 6.30", "SG3428MP(UN) 6.36", "SG3428MP(BR) 6.36", "SG3428MP(IN) 6.38", "SG3428MP(EU) 6.36"], "versions": [{"status": "affected", "version": "0", "lessThan": "6.30.1 Build 20260127 Rel.39545", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2218P 2.2x", "platforms": ["SG2218P(UN) 2.20", "SG2218P(UN) 2.26"], "versions": [{"status": "affected", "version": "0", "lessThan": "2.20.2 Build 20260127 Rel.32017", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2016P 1.3x", "platforms": ["SG2016P(UN) 1.30", "SG2016P(UN) 1.36"], "versions": [{"status": "affected", "version": "0", "lessThan": "1.30.1 Build 20260127 Rel.32017", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3452XP 2.3x", "platforms": ["SG3452XP(UN) 2.30", "SG3452XP(UN) 2.36", "SG3452XP(IN) 2.38"], "versions": [{"status": "affected", "version": "0", "lessThan": "2.30.1 Build 20260128 Rel.8721", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3428XMPP 1.2x", "platforms": ["SG3428XMPP(UN) 1.20", "SG3428XMPP(UN) 1.26"], "versions": [{"status": "affected", "version": "0", "lessThan": "1.20.1 Build 20260127 Rel.39545", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3452X 1.3x", "platforms": ["SG3452X(UN) 1.30", "SG3452X(UN) 1.36", "SG3452X(IN) 1.38"], "versions": [{"status": "affected", "version": "0", "lessThan": "1.30.1 Build 20260128 Rel.8721", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2008 4.3x", "platforms": ["SG2008(UN) 4.30", "SG2008(UN) 4.36"], "versions": [{"status": "affected", "version": "0", "lessThan": "4.30.1 Build 20260127 Rel.32017", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3210 3.3x", "platforms": ["SG3210(UN) 3.30", "SG3210(UN) 3.36", "SG3210(IN) 3.38"], "versions": [{"status": "affected", "version": "0", "lessThan": "3.30.1 Build 20260206 Rel.33103", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2210MP 5.2x", "platforms": ["SG2210MP(UN) 5.20", "SG2210MP(IN) 5.28", "SG2210MP(EU) 5.26"], "versions": [{"status": "affected", "version": "0", "lessThan": "5.20.1 Build 20260127 Rel.32017", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2210P 5.3x", "platforms": ["SG2210P(UN) 5.30", "SG2210P(UN) 5.36", "SG2210P(BR) 5.36", "SG2210P(IN) 5.38", "SG2210P(EU) 5.36"], "versions": [{"status": "affected", "version": "0", "lessThan": "5.30.1 Build 20260127 Rel.32017", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2218 1.3x", "platforms": ["SG2218(UN) 1.30", "SG2218(UN) 1.36"], "packageName": "SG2218(UN) 1.30,SG2218(UN) 1.36", "versions": [{"status": "affected", "version": "0", "lessThan": "1.30.1 Build 20260127 Rel.32017", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3452 1.3x", "platforms": ["SG3452(UN) 1.30", "SG3452(UN) 1.36", "SG3452(IN) 1.38"], "versions": [{"status": "affected", "version": "0", "lessThan": "1.30.1 Build 20260128 Rel.7041", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3210X-M2 1.2x", "platforms": ["SG3210X-M2(UN) 1.20", "SG3210X-M2(UN) 1.26"], "versions": [{"status": "affected", "version": "0", "lessThan": "1.20.1 Build 20260129 Rel.13605", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2210XMP-M2 1.x", "platforms": ["SG2210XMP-M2(UN) 1.0", "SG2210XMP-M2(UN) 1.6"], "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.19 Build 20260121 Rel.53314", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2008 4.2x", "platforms": ["SG2008(UN) 4.20", "SG2008(UN) 4.26"], "versions": [{"status": "affected", "version": "0", "lessThan": "4.20.17 Build 20260121 Rel.53429", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2218P 1.2x", "platforms": ["SG2218P(UN) 1.20", "SG2218P(UN) 1.26"], "versions": [{"status": "affected", "version": "0", "lessThan": "1.20.17 Build 20260121 Rel.53429", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3210 3.2x", "platforms": ["SG3210(UN) 3.20", "SG3210(IN) 3.28", "SG3210(UN) 3.26"], "versions": [{"status": "affected", "version": "0", "lessThan": "3.20.17 Build 20260121 Rel.53429", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3428X-M2 1.2x", "platforms": ["SG3428X-M2(UN) 1.20", "SG3428X-M2(UN) 1.26"], "versions": [{"status": "affected", "version": "0", "lessThan": "1.20.18 Build 20260121 Rel.54271", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SX3832MPP 1.x", "platforms": ["SX3832MPP(UN) 1.0", "SX3832MPP(UN) 1.6"], "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.11 Build 20260121 Rel.56907", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2218 1.2x", "platforms": ["SG2218(UN) 1.20", "SG2218(UN) 1.26"], "versions": [{"status": "affected", "version": "0", "lessThan": "1.20.17 Build 20260121 Rel.53429", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SX3832 1.x", "platforms": ["SX3832(UN) 1.0", "SX3832(UN) 1.6"], "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.12 Build 20260121 Rel.56907", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2428LP 1.x", "platforms": ["SG2428LP(UN) 1.0", "SG2428LP(UN) 1.6", "SG2428LP(IN) 1.8"], "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.15 Build 20260121 Rel.53429", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SL2428P 6.2x", "platforms": ["SL2428P(UN) 6.20", "SL2428P(UN) 6.26"], "versions": [{"status": "affected", "version": "0", "lessThan": "6.20.18 Build 20260121 Rel.53429", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3218XP-M2 1.x", "platforms": ["SG3218XP-M2(UN) 1.0", "SG3218XP-M2(UN) 1.6"], "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.19 Build 20260121 Rel.53314", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3210XHP-M2 3.x", "platforms": ["SG3210XHP-M2(UN) 3.0", "SG3210XHP-M2(IN)3.8", "SG3210XHP-M2(UN) 3.6"], "versions": [{"status": "affected", "version": "0", "lessThan": "3.0.21 Build 20260121 Rel.53314", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2218P 2.x", "platforms": ["SG2218P(UN) 2.0", "SG2218P(UN) 2.6"], "versions": [{"status": "affected", "version": "0", "lessThan": "2.0.14 Build 20260121 Rel.53429", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3210X-M2 1.x", "platforms": ["SG3210X-M2(UN) 1.0", "SG3210X-M2(UN) 1.6"], "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.19 Build 20260121 Rel.53314", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2428P 5.3x", "platforms": ["SG2428P(UN) 5.30", "SG2428P(UN) 5.32", "SG2428P(IN) 5.33"], "versions": [{"status": "affected", "version": "0", "lessThan": "5.30.16 Build 20260121 Rel.53429", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2210MP 4.2x", "platforms": ["SG2210MP(UN) 4.20", "SG2210MP(UN) 4.26"], "versions": [{"status": "affected", "version": "0", "lessThan": "4.20.18 Build 20260121 Rel.53429", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3452P 3.3x", "platforms": ["SG3452P(UN) 3.30", "SG3452P(IN) 3.33", "SG3452P(UN) 3.32"], "versions": [{"status": "affected", "version": "0", "lessThan": "3.30.17 Build 20260121 Rel.54132", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3452 1.2x", "platforms": ["SG3452(UN) 1.20", "SG3452(IN) 1.28", "SG3452(UN) 1.26"], "versions": [{"status": "affected", "version": "0", "lessThan": "1.20.17 Build 20260121 Rel.54132", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2452LP 1.x", "platforms": ["SG2452LP(UN) 1.0", "SG2452LP(UN) 1.6", "SG2452LP(IN) 1.8"], "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.13 Build 20260121 Rel.54132", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SX3032F 1.x", "platforms": ["SX3032F(UN) 1.0", "SX3032F(UN) 1.6"], "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.15 Build 20260121 Rel.56907", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3452X 1.2x", "platforms": ["SG3452X(UN) 1.20", "SG3452X(UN) 1.26"], "versions": [{"status": "affected", "version": "0", "lessThan": "1.20.18 Build 20260121 Rel.55833", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3452XMPP 1.x", "platforms": ["SG3452XMPP(UN) 1.0", "SG3452XMPP(UN) 1.6", "SG3452XMPP(IN) 1.8"], "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.15 Build 20260121 Rel.55833", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3428XPP-M2 1.2x", "platforms": ["SG3428XPP-M2(UN) 1.20", "SG3428XPP-M2(UN) 1.26"], "versions": [{"status": "affected", "version": "0", "lessThan": "1.20.19 Build 20260121 Rel.54271", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "TL-SG3452P 3.0", "platforms": ["TL-SG3452P(UN) 3.0"], "versions": [{"status": "affected", "version": "0", "lessThan": "3.0.22 Build 20260121 Rel.54132", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2428P 5.2x", "platforms": ["SG2428P(UN) 5.20", "SG2428P(UN) 5.26"], "versions": [{"status": "affected", "version": "0", "lessThan": "5.20.20 Build 20260121 Rel.53429", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2210MP 5.x", "platforms": ["SG2210MP(UN) 5.0", "SG2210MP(IN) 5.8"], "versions": [{"status": "affected", "version": "0", "lessThan": "5.0.15 Build 20260121 Rel.53429", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2005P-PD 1.x", "platforms": ["SG2005P-PD(UN) 1.0", "SG2005P-PD(UN) 1.6"], "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.19 Build 20260121 Rel.53429", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2016P 1.2x", "platforms": ["SG2016P(UN) 1.20", "SG2016P(UN) 1.26"], "versions": [{"status": "affected", "version": "0", "lessThan": "1.20.17 Build 20260121 Rel.53429", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3452XP 2.2x", "platforms": ["SG3452XP(UN) 2.20", "SG3452XP(UN) 2.26"], "versions": [{"status": "affected", "version": "0", "lessThan": "2.20.20 Build 20260121 Rel.55833", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3428XMP 3.2x", "platforms": ["SG3428XMP(UN) 3.20", "SG3428XMP(IN) 3.28", "SG3428XMP(UN) 3.26"], "versions": [{"status": "affected", "version": "0", "lessThan": "3.20.21 Build 20260113 Rel.67732", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3428X 1.3x", "platforms": ["SG3428X(UN) 1.30", "SG3428X(IN) 1.33", "SG3428X(UN) 1.32"], "versions": [{"status": "affected", "version": "0", "lessThan": "1.30.17 Build 20260113 Rel.67732", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3428XF 1.2x", "platforms": ["SG3428XF(UN) 1.20", "SG3428XF(IN) 1.28", "SG3428XF(UN) 1.26"], "versions": [{"status": "affected", "version": "0", "lessThan": "1.20.16 Build 20260113 Rel.67732", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3428MP 6.2x", "platforms": ["SG3428MP(UN) 6.20", "SG3428MP(IN) 6.28", "SG3428MP(UN) 6.26"], "versions": [{"status": "affected", "version": "0", "lessThan": "6.20.20 Build 20260113 Rel.67732", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "TL-SG3428MP 5.x", "platforms": ["TL-SG3428MP(UN) 5.0", "TL-SG3428MP(UN) 5.6", "TL-SG3428MP(UN) 5.20", "TL-SG3428MP(UN) 5.26"], "versions": [{"status": "affected", "version": "0", "lessThan": "5.0.25 Build 20260113 Rel.67732", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3428 2.3x", "platforms": ["SG3428(UN) 2.30", "SG3428(IN) 2.33", "SG3428(UN) 2.32"], "versions": [{"status": "affected", "version": "0", "lessThan": "2.30.16 Build 20260113 Rel.67732", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3428XMPP 1.x", "platforms": ["SG3428XMPP(UN) 1.0", "SG3428XMPP(IN) 1.8", "SG3428XMPP(UN) 1.6"], "packageName": "SG3428XMPP(UN) 1.0,SG3428XMPP(IN) 1.8,SG3428XMPP(UN) 1.6", "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.16 Build 20260113 Rel.67732", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "TL-SG2428P 4.x", "platforms": ["TL-SG2428P(UN) 4.0", "TL-SG2428P(UN) 4.6"], "versions": [{"status": "affected", "version": "0", "lessThan": "4.0.26 Build 20260121 Rel.53429", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2210P 5.2x", "platforms": ["SG2210P(UN) 5.20", "SG2210P(IN) 5.28", "SG2210P(UN) 5.26"], "versions": [{"status": "affected", "version": "0", "lessThan": "5.20.18 Build 20260121 Rel.53429", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SX3008F 1.2x", "platforms": ["SX3008F(UN) 1.20", "SX3008F(IN)1.28", "SX3008F(UN) 1.26"], "versions": [{"status": "affected", "version": "0", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SX3206HPP 1.20", "platforms": ["SX3206HPP(UN) 1.20"], "versions": [{"status": "affected", "version": "0", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests. Under specific conditions, this flaw may result in unintended command execution.<br>An unauthenticated attacker with network access to the affected interface may cause memory corruption, service instability, or information disclosure. Successful exploitation may allow remote code execution or denial-of-service.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests. Under specific conditions, this flaw may result in unintended command execution.&lt;br&gt;An unauthenticated attacker with network access to the affected interface may cause memory corruption, service instability, or information disclosure. Successful exploitation may allow remote code execution or denial-of-service."}]}], "references": [{"url": "https://support.omadanetworks.com/us/product/", "tags": ["patch"]}, {"url": "https://support.omadanetworks.com/au/download/firmware/", "tags": ["patch"]}, {"url": "https://support.omadanetworks.com/en/download/firmware/", "tags": ["patch"]}, {"url": "https://support.omadanetworks.com/us/document/118794/", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "ADJACENT", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "HIGH", "baseScore": 7.7, "vectorString": "CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}], "credits": [{"lang": "en", "value": "tangrs", "type": "finder"}], "source": {"discovery": "INTERNAL"}, "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-13T18:09:19.359038Z", "id": "CVE-2026-1668", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-13T18:09:29.873Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-1668", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-03-13T18:09:19.359038Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-13T18:09:24.096Z"}}], "cna": {"title": "Input Validation Vulnerability on Multiple Omada Switches", "source": {"discovery": "INTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "tangrs"}], "impacts": [{"capecId": "CAPEC-787", "descriptions": [{"lang": "en", "value": "CAPEC-787 Out-of-Bounds Write"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 7.7, "Automatable": "NOT_DEFINED", "attackVector": "ADJACENT", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "TP-Link Systems Inc.", "product": "SG2008P 3.2x", "versions": [{"status": "affected", "version": "0", "lessThan": "3.20.17 Build 20260121 Rel.53429", "versionType": "custom"}], "platforms": ["SG2008P(UN) hardware version 3.20", "SG2008P(UN) hardware version 3.26"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2008P 3.3x", "versions": [{"status": "affected", "version": "0", "lessThan": "3.30.1 Build 20260127 Rel.32017", "versionType": "custom"}], "platforms": ["SG2008P(UN) hardware version 3.30", "SG2008P(UN) hardware version 3.36", "SG2008P(EU) hardware version 3.36"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SX3016F 1.3x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.30.1 Build 20260129 Rel.8831", "versionType": "custom"}], "platforms": ["SX3016F(UN) hardware version 1.30", "SX3016F(UN) hardware version 1.36", "SX3016F(IN) hardware version 1.38"], "packageName": "SX3016F(UN)/(IN) hardware 1.30/1.36/1.38", "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SX3016F 1.2x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.20.16 Build 20260121 Rel.57953", "versionType": "custom"}], "platforms": ["SX3016F(UN) hardware version 1.20", "SX3016F(UN) hardware version 1.26", "SX3016F(IN) hardware version 1.28"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3428 2.4x", "versions": [{"status": "affected", "version": "0", "lessThan": "2.40.1 Build 20260127 Rel.39545", "versionType": "custom"}], "platforms": ["SG3428(UN) 2.40", "SG3428(UN) 2.46", "SG3428(BR) 2.46", "SG3428(IN) 2.48"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3428XMP 3.3x", "versions": [{"status": "affected", "version": "0", "lessThan": "3.30.1 Build 20260127 Rel.39545", "versionType": "custom"}], "platforms": ["SG3428XMP(UN) 3.30", "SG3428XMP(UN) 3.36", "SG3428XMP(EU) 3.36", "SG3428XMP(IN) 3.38"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3428X 1.4x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.40.1 Build 20260127 Rel.39545", "versionType": "custom"}], "platforms": ["SG3428X(UN) 1.40", "SG3428X(UN) 1.46", "SG3428X(EU) 1.46", "SG3428X(IN) 1.48"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3428XF 1.3x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.30.1 Build 20260127 Rel.39545", "versionType": "custom"}], "platforms": ["SG3428XF(UN) 1.30", "SG3428XF(UN) 1.36", "SG3428XF(IN) 1.38"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3452P 3.4x", "versions": [{"status": "affected", "version": "0", "lessThan": "3.40.1 Build 20260128 Rel.7041", "versionType": "custom"}], "platforms": ["SG3452P(UN) 3.40", "SG3452P(UN) 3.46", "SG3452P(IN) 3.48"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3428MP 6.3x", "versions": [{"status": "affected", "version": "0", "lessThan": "6.30.1 Build 20260127 Rel.39545", "versionType": "custom"}], "platforms": ["SG3428MP(UN) 6.30", "SG3428MP(UN) 6.36", "SG3428MP(BR) 6.36", "SG3428MP(IN) 6.38", "SG3428MP(EU) 6.36"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2218P 2.2x", "versions": [{"status": "affected", "version": "0", "lessThan": "2.20.2 Build 20260127 Rel.32017", "versionType": "custom"}], "platforms": ["SG2218P(UN) 2.20", "SG2218P(UN) 2.26"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2016P 1.3x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.30.1 Build 20260127 Rel.32017", "versionType": "custom"}], "platforms": ["SG2016P(UN) 1.30", "SG2016P(UN) 1.36"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3452XP 2.3x", "versions": [{"status": "affected", "version": "0", "lessThan": "2.30.1 Build 20260128 Rel.8721", "versionType": "custom"}], "platforms": ["SG3452XP(UN) 2.30", "SG3452XP(UN) 2.36", "SG3452XP(IN) 2.38"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3428XMPP 1.2x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.20.1 Build 20260127 Rel.39545", "versionType": "custom"}], "platforms": ["SG3428XMPP(UN) 1.20", "SG3428XMPP(UN) 1.26"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3452X 1.3x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.30.1 Build 20260128 Rel.8721", "versionType": "custom"}], "platforms": ["SG3452X(UN) 1.30", "SG3452X(UN) 1.36", "SG3452X(IN) 1.38"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2008 4.3x", "versions": [{"status": "affected", "version": "0", "lessThan": "4.30.1 Build 20260127 Rel.32017", "versionType": "custom"}], "platforms": ["SG2008(UN) 4.30", "SG2008(UN) 4.36"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3210 3.3x", "versions": [{"status": "affected", "version": "0", "lessThan": "3.30.1 Build 20260206 Rel.33103", "versionType": "custom"}], "platforms": ["SG3210(UN) 3.30", "SG3210(UN) 3.36", "SG3210(IN) 3.38"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2210MP 5.2x", "versions": [{"status": "affected", "version": "0", "lessThan": "5.20.1 Build 20260127 Rel.32017", "versionType": "custom"}], "platforms": ["SG2210MP(UN) 5.20", "SG2210MP(IN) 5.28", "SG2210MP(EU) 5.26"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2210P 5.3x", "versions": [{"status": "affected", "version": "0", "lessThan": "5.30.1 Build 20260127 Rel.32017", "versionType": "custom"}], "platforms": ["SG2210P(UN) 5.30", "SG2210P(UN) 5.36", "SG2210P(BR) 5.36", "SG2210P(IN) 5.38", "SG2210P(EU) 5.36"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2218 1.3x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.30.1 Build 20260127 Rel.32017", "versionType": "custom"}], "platforms": ["SG2218(UN) 1.30", "SG2218(UN) 1.36"], "packageName": "SG2218(UN) 1.30,SG2218(UN) 1.36", "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3452 1.3x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.30.1 Build 20260128 Rel.7041", "versionType": "custom"}], "platforms": ["SG3452(UN) 1.30", "SG3452(UN) 1.36", "SG3452(IN) 1.38"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3210X-M2 1.2x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.20.1 Build 20260129 Rel.13605", "versionType": "custom"}], "platforms": ["SG3210X-M2(UN) 1.20", "SG3210X-M2(UN) 1.26"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2210XMP-M2 1.x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.19 Build 20260121 Rel.53314", "versionType": "custom"}], "platforms": ["SG2210XMP-M2(UN) 1.0", "SG2210XMP-M2(UN) 1.6"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2008 4.2x", "versions": [{"status": "affected", "version": "0", "lessThan": "4.20.17 Build 20260121 Rel.53429", "versionType": "custom"}], "platforms": ["SG2008(UN) 4.20", "SG2008(UN) 4.26"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2218P 1.2x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.20.17 Build 20260121 Rel.53429", "versionType": "custom"}], "platforms": ["SG2218P(UN) 1.20", "SG2218P(UN) 1.26"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3210 3.2x", "versions": [{"status": "affected", "version": "0", "lessThan": "3.20.17 Build 20260121 Rel.53429", "versionType": "custom"}], "platforms": ["SG3210(UN) 3.20", "SG3210(IN) 3.28", "SG3210(UN) 3.26"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3428X-M2 1.2x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.20.18 Build 20260121 Rel.54271", "versionType": "custom"}], "platforms": ["SG3428X-M2(UN) 1.20", "SG3428X-M2(UN) 1.26"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SX3832MPP 1.x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.11 Build 20260121 Rel.56907", "versionType": "custom"}], "platforms": ["SX3832MPP(UN) 1.0", "SX3832MPP(UN) 1.6"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2218 1.2x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.20.17 Build 20260121 Rel.53429", "versionType": "custom"}], "platforms": ["SG2218(UN) 1.20", "SG2218(UN) 1.26"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SX3832 1.x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.12 Build 20260121 Rel.56907", "versionType": "custom"}], "platforms": ["SX3832(UN) 1.0", "SX3832(UN) 1.6"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2428LP 1.x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.15 Build 20260121 Rel.53429", "versionType": "custom"}], "platforms": ["SG2428LP(UN) 1.0", "SG2428LP(UN) 1.6", "SG2428LP(IN) 1.8"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SL2428P 6.2x", "versions": [{"status": "affected", "version": "0", "lessThan": "6.20.18 Build 20260121 Rel.53429", "versionType": "custom"}], "platforms": ["SL2428P(UN) 6.20", "SL2428P(UN) 6.26"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3218XP-M2 1.x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.19 Build 20260121 Rel.53314", "versionType": "custom"}], "platforms": ["SG3218XP-M2(UN) 1.0", "SG3218XP-M2(UN) 1.6"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3210XHP-M2 3.x", "versions": [{"status": "affected", "version": "0", "lessThan": "3.0.21 Build 20260121 Rel.53314", "versionType": "custom"}], "platforms": ["SG3210XHP-M2(UN) 3.0", "SG3210XHP-M2(IN)3.8", "SG3210XHP-M2(UN) 3.6"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2218P 2.x", "versions": [{"status": "affected", "version": "0", "lessThan": "2.0.14 Build 20260121 Rel.53429", "versionType": "custom"}], "platforms": ["SG2218P(UN) 2.0", "SG2218P(UN) 2.6"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3210X-M2 1.x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.19 Build 20260121 Rel.53314", "versionType": "custom"}], "platforms": ["SG3210X-M2(UN) 1.0", "SG3210X-M2(UN) 1.6"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2428P 5.3x", "versions": [{"status": "affected", "version": "0", "lessThan": "5.30.16 Build 20260121 Rel.53429", "versionType": "custom"}], "platforms": ["SG2428P(UN) 5.30", "SG2428P(UN) 5.32", "SG2428P(IN) 5.33"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2210MP 4.2x", "versions": [{"status": "affected", "version": "0", "lessThan": "4.20.18 Build 20260121 Rel.53429", "versionType": "custom"}], "platforms": ["SG2210MP(UN) 4.20", "SG2210MP(UN) 4.26"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3452P 3.3x", "versions": [{"status": "affected", "version": "0", "lessThan": "3.30.17 Build 20260121 Rel.54132", "versionType": "custom"}], "platforms": ["SG3452P(UN) 3.30", "SG3452P(IN) 3.33", "SG3452P(UN) 3.32"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3452 1.2x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.20.17 Build 20260121 Rel.54132", "versionType": "custom"}], "platforms": ["SG3452(UN) 1.20", "SG3452(IN) 1.28", "SG3452(UN) 1.26"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2452LP 1.x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.13 Build 20260121 Rel.54132", "versionType": "custom"}], "platforms": ["SG2452LP(UN) 1.0", "SG2452LP(UN) 1.6", "SG2452LP(IN) 1.8"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SX3032F 1.x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.15 Build 20260121 Rel.56907", "versionType": "custom"}], "platforms": ["SX3032F(UN) 1.0", "SX3032F(UN) 1.6"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3452X 1.2x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.20.18 Build 20260121 Rel.55833", "versionType": "custom"}], "platforms": ["SG3452X(UN) 1.20", "SG3452X(UN) 1.26"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3452XMPP 1.x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.15 Build 20260121 Rel.55833", "versionType": "custom"}], "platforms": ["SG3452XMPP(UN) 1.0", "SG3452XMPP(UN) 1.6", "SG3452XMPP(IN) 1.8"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3428XPP-M2 1.2x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.20.19 Build 20260121 Rel.54271", "versionType": "custom"}], "platforms": ["SG3428XPP-M2(UN) 1.20", "SG3428XPP-M2(UN) 1.26"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "TL-SG3452P 3.0", "versions": [{"status": "affected", "version": "0", "lessThan": "3.0.22 Build 20260121 Rel.54132", "versionType": "custom"}], "platforms": ["TL-SG3452P(UN) 3.0"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2428P 5.2x", "versions": [{"status": "affected", "version": "0", "lessThan": "5.20.20 Build 20260121 Rel.53429", "versionType": "custom"}], "platforms": ["SG2428P(UN) 5.20", "SG2428P(UN) 5.26"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2210MP 5.x", "versions": [{"status": "affected", "version": "0", "lessThan": "5.0.15 Build 20260121 Rel.53429", "versionType": "custom"}], "platforms": ["SG2210MP(UN) 5.0", "SG2210MP(IN) 5.8"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2005P-PD 1.x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.19 Build 20260121 Rel.53429", "versionType": "custom"}], "platforms": ["SG2005P-PD(UN) 1.0", "SG2005P-PD(UN) 1.6"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2016P 1.2x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.20.17 Build 20260121 Rel.53429", "versionType": "custom"}], "platforms": ["SG2016P(UN) 1.20", "SG2016P(UN) 1.26"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3452XP 2.2x", "versions": [{"status": "affected", "version": "0", "lessThan": "2.20.20 Build 20260121 Rel.55833", "versionType": "custom"}], "platforms": ["SG3452XP(UN) 2.20", "SG3452XP(UN) 2.26"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3428XMP 3.2x", "versions": [{"status": "affected", "version": "0", "lessThan": "3.20.21 Build 20260113 Rel.67732", "versionType": "custom"}], "platforms": ["SG3428XMP(UN) 3.20", "SG3428XMP(IN) 3.28", "SG3428XMP(UN) 3.26"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3428X 1.3x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.30.17 Build 20260113 Rel.67732", "versionType": "custom"}], "platforms": ["SG3428X(UN) 1.30", "SG3428X(IN) 1.33", "SG3428X(UN) 1.32"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3428XF 1.2x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.20.16 Build 20260113 Rel.67732", "versionType": "custom"}], "platforms": ["SG3428XF(UN) 1.20", "SG3428XF(IN) 1.28", "SG3428XF(UN) 1.26"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3428MP 6.2x", "versions": [{"status": "affected", "version": "0", "lessThan": "6.20.20 Build 20260113 Rel.67732", "versionType": "custom"}], "platforms": ["SG3428MP(UN) 6.20", "SG3428MP(IN) 6.28", "SG3428MP(UN) 6.26"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "TL-SG3428MP 5.x", "versions": [{"status": "affected", "version": "0", "lessThan": "5.0.25 Build 20260113 Rel.67732", "versionType": "custom"}], "platforms": ["TL-SG3428MP(UN) 5.0", "TL-SG3428MP(UN) 5.6", "TL-SG3428MP(UN) 5.20", "TL-SG3428MP(UN) 5.26"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3428 2.3x", "versions": [{"status": "affected", "version": "0", "lessThan": "2.30.16 Build 20260113 Rel.67732", "versionType": "custom"}], "platforms": ["SG3428(UN) 2.30", "SG3428(IN) 2.33", "SG3428(UN) 2.32"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG3428XMPP 1.x", "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.16 Build 20260113 Rel.67732", "versionType": "custom"}], "platforms": ["SG3428XMPP(UN) 1.0", "SG3428XMPP(IN) 1.8", "SG3428XMPP(UN) 1.6"], "packageName": "SG3428XMPP(UN) 1.0,SG3428XMPP(IN) 1.8,SG3428XMPP(UN) 1.6", "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "TL-SG2428P 4.x", "versions": [{"status": "affected", "version": "0", "lessThan": "4.0.26 Build 20260121 Rel.53429", "versionType": "custom"}], "platforms": ["TL-SG2428P(UN) 4.0", "TL-SG2428P(UN) 4.6"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SG2210P 5.2x", "versions": [{"status": "affected", "version": "0", "lessThan": "5.20.18 Build 20260121 Rel.53429", "versionType": "custom"}], "platforms": ["SG2210P(UN) 5.20", "SG2210P(IN) 5.28", "SG2210P(UN) 5.26"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SX3008F 1.2x", "versions": [{"status": "affected", "version": "0", "versionType": "custom"}], "platforms": ["SX3008F(UN) 1.20", "SX3008F(IN)1.28", "SX3008F(UN) 1.26"], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "SX3206HPP 1.20", "versions": [{"status": "affected", "version": "0", "versionType": "custom"}], "platforms": ["SX3206HPP(UN) 1.20"], "defaultStatus": "unaffected"}], "references": [{"url": "https://support.omadanetworks.com/us/product/", "tags": ["patch"]}, {"url": "https://support.omadanetworks.com/au/download/firmware/", "tags": ["patch"]}, {"url": "https://support.omadanetworks.com/en/download/firmware/", "tags": ["patch"]}, {"url": "https://support.omadanetworks.com/us/document/118794/", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.5.0"}, "descriptions": [{"lang": "en", "value": "The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests. Under specific conditions, this flaw may result in unintended command execution.<br>An unauthenticated attacker with network access to the affected interface may cause memory corruption, service instability, or information disclosure. Successful exploitation may allow remote code execution or denial-of-service.", "supportingMedia": [{"type": "text/html", "value": "The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests. Under specific conditions, this flaw may result in unintended command execution.&lt;br&gt;An unauthenticated attacker with network access to the affected interface may cause memory corruption, service instability, or information disclosure. Successful exploitation may allow remote code execution or denial-of-service.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation"}]}], "providerMetadata": {"orgId": "f23511db-6c3e-4e32-a477-6aa17d310630", "shortName": "TPLink", "dateUpdated": "2026-03-13T16:53:23.486Z"}}}, "cveMetadata": {"cveId": "CVE-2026-1668", "state": "PUBLISHED", "dateUpdated": "2026-03-13T18:09:29.873Z", "dateReserved": "2026-01-29T21:44:58.903Z", "assignerOrgId": "f23511db-6c3e-4e32-a477-6aa17d310630", "datePublished": "2026-03-13T16:53:23.486Z", "assignerShortName": "TPLink"}, "dataVersion": "5.2"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sg2005p-pd_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9F442622-A627-45A3-A268-52258945E3FD", "versionEndExcluding": "1.0.19", "versionStartIncluding": "1.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sg2005p-pd:-:*:*:*:*:*:*:*", "matchCriteriaId": "1E30DC41-D802-4A16-8192-161BF889AFCD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sg2008_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "78C14AB4-7326-4367-AEFC-8F741CB2CB1C", "versionEndExcluding": "4.20.17", "versionStartIncluding": "4.20.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:tp-link:omada_sg2008_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A7E0322E-ED92-4B48-9FE9-3C30F39F9710", "versionEndExcluding": "4.30.1", "versionStartIncluding": "4.30.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sg2008:-:*:*:*:*:*:*:*", "matchCriteriaId": "2D360F8F-92C4-4ED9-95D0-8C1F6F2FEC8D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sg2008p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EC9EFE7A-FF39-4B2E-82C1-04121C2C9D24", "versionEndExcluding": "3.20.17", "versionStartIncluding": "3.20.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:tp-link:omada_sg2008p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "19BB14BE-02C6-47AD-8DCB-848263B5A812", "versionEndExcluding": "3.30.1", "versionStartIncluding": "3.30.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sg2008p:-:*:*:*:*:*:*:*", "matchCriteriaId": "B45EE288-81F0-4FD5-970B-6663F54DBC35", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sg2016p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1F8D1A0A-0718-4CAF-826C-7977702C0875", "versionEndExcluding": "1.20.17", "versionStartIncluding": "1.20.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:tp-link:omada_sg2016p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6F75416B-E723-475D-8C29-0A04F547A6D3", "versionEndExcluding": "1.30.1", "versionStartIncluding": "1.30.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sg2016p:-:*:*:*:*:*:*:*", "matchCriteriaId": "4290A113-B61D-4936-9D55-C1B49180DE82", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sg2210mp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "250A2C0E-7323-41E6-87DC-DA23AAF90F6E", "versionEndExcluding": "4.20.18", "versionStartIncluding": "4.20.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:tp-link:omada_sg2210mp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5495C962-135D-427C-91AD-CC773F487198", "versionEndExcluding": "5.0.15", "versionStartIncluding": "5.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:tp-link:omada_sg2210mp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8D024801-A31E-4480-828F-416655512E83", "versionEndExcluding": "5.20.1", "versionStartIncluding": "5.20.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sg2210mp:-:*:*:*:*:*:*:*", "matchCriteriaId": "926000F4-0B81-4E0F-8232-860C2A2745D9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sg2210p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B0F700E3-E24D-4126-AD8B-F2D8EC2CD0DB", "versionEndExcluding": "5.20.18", "versionStartIncluding": "5.20.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:tp-link:omada_sg2210p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "091AB8B5-E644-4A7E-B422-61E278D08EBE", "versionEndExcluding": "5.30.1", "versionStartIncluding": "5.30.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sg2210p:-:*:*:*:*:*:*:*", "matchCriteriaId": "D371E850-1A98-41A5-9A95-CBDE21A76ACE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sg2210xmp-m2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E57BD2FD-8266-481E-9C06-724C5614F797", "versionEndExcluding": "1.0.19", "versionStartIncluding": "1.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sg2210xmp-m2:-:*:*:*:*:*:*:*", "matchCriteriaId": "C4E197C0-81C4-4AA8-9E12-D4DB5A2928EC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sg2218_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "632C07BD-3245-49E2-82C7-C95199E83FBF", "versionEndExcluding": "1.20.17", "versionStartIncluding": "1.20.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:tp-link:omada_sg2218_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "34921179-1C3C-4474-9A8C-76C772369E06", "versionEndExcluding": "1.30.1", "versionStartIncluding": "1.30.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sg2218:-:*:*:*:*:*:*:*", "matchCriteriaId": "5D5D8075-5078-4A6F-8123-D321807DC786", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sg2218p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "46AB5247-1522-441B-B2E8-1E71974D2773", "versionEndExcluding": "1.20.17", "versionStartIncluding": "1.20.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:tp-link:omada_sg2218p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CAE05EAC-54C7-4EC0-91D5-E8A669DBFC88", "versionEndExcluding": "2.0.14", "versionStartIncluding": "2.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:tp-link:omada_sg2218p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "87A33B95-0948-43AB-8B1F-2E01D1C47659", "versionEndExcluding": "2.20.2", "versionStartIncluding": "2.20.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sg2218p:-:*:*:*:*:*:*:*", "matchCriteriaId": "378EAC66-B76A-4ECA-88CB-3F14985D8A68", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sg2428lp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7FC2BE28-2831-4E9D-96B2-5F76D251B915", "versionEndExcluding": "1.0.13", "versionStartIncluding": "1.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sg2428lp:-:*:*:*:*:*:*:*", "matchCriteriaId": "C1E3DDFC-E3D0-47EE-83EE-EC5B4CE4B489", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sg2428p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D84F985C-7E47-4195-A110-696949E71770", "versionEndExcluding": "5.20.20", "versionStartIncluding": "5.20.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:tp-link:omada_sg2428p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "24A0D662-A963-4434-92F2-004FFB3EE682", "versionEndExcluding": "5.30.16", "versionStartIncluding": "5.30.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sg2428p:-:*:*:*:*:*:*:*", "matchCriteriaId": "51E52787-AE06-40E8-B753-3D2289FBE7C2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sg2452lp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B5DAF94C-3889-41EA-8793-F20552AB64FC", "versionEndExcluding": "1.0.13", "versionStartIncluding": "1.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sg2452lp:-:*:*:*:*:*:*:*", "matchCriteriaId": "E463EE2C-9B8B-4AB8-B8E3-D586F4BEB8EC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sg3210_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "86D1E164-A64A-4217-8A69-15FA28958159", "versionEndExcluding": "3.20.17", "versionStartIncluding": "3.20.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:tp-link:omada_sg3210_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AC10BE36-49C9-42ED-A9F7-32C0E319A1C7", "versionEndExcluding": "3.30.1", "versionStartIncluding": "3.30.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sg3210:-:*:*:*:*:*:*:*", "matchCriteriaId": "71DE9E85-0C50-4047-8CE7-EC54FB3A8F1E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sg3210xhp-m2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A1DB50B9-5DBB-46D9-AC53-4F3A814F8EDC", "versionEndExcluding": "3.0.21", "versionStartIncluding": "3.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sg3210xhp-m2:-:*:*:*:*:*:*:*", "matchCriteriaId": "5CDEA62A-71EE-4A25-AECE-19F4D0BE1E1F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sg3210x-m2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "921AFD1B-F9D0-486C-A4B5-E1B053F6667C", "versionEndExcluding": "1.20.1", "versionStartIncluding": "1.20.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sg3210x-m2:-:*:*:*:*:*:*:*", "matchCriteriaId": "9562D570-5365-47F4-9A29-6D4079C6E1EF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sg3218xp-m2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FE5F410D-06A3-4E7B-A1CD-2330EBF8BEE1", "versionEndExcluding": "1.0.19", "versionStartIncluding": "1.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sg3218xp-m2:-:*:*:*:*:*:*:*", "matchCriteriaId": "54B2B69D-6F92-4CA8-BAD5-B56E63169F5D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sg3428_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "061F253D-D425-4ABD-852C-74B444749D23", "versionEndExcluding": "2.30.16", "versionStartIncluding": "2.30.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:tp-link:omada_sg3428_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E187948C-9AF3-41FC-88CF-560F667BED5E", "versionEndExcluding": "2.40.1", "versionStartIncluding": "2.40.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sg3428:-:*:*:*:*:*:*:*", "matchCriteriaId": "AD1C5645-5789-414A-980F-C943E0B2AD59", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sg3428mp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "86664BB3-FB10-43B1-8F19-0BAE2E394F22", "versionEndExcluding": "6.20.20", "versionStartIncluding": "6.20.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:tp-link:omada_sg3428mp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "70747A4A-18EB-434B-9A54-3E3C52A363AC", "versionEndExcluding": "6.30.1", "versionStartIncluding": "6.30.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sg3428mp:-:*:*:*:*:*:*:*", "matchCriteriaId": "1B1579D0-F385-4909-871D-20309C36C549", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sg3428x_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5821EF1C-E18F-42F5-8414-CDF9C0426275", "versionEndExcluding": "1.30.17", "versionStartIncluding": "1.30.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:tp-link:omada_sg3428x_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "93170151-DE56-4418-821E-EE410462AA93", "versionEndExcluding": "1.40.1", "versionStartIncluding": "1.40.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sg3428x:-:*:*:*:*:*:*:*", "matchCriteriaId": "00DFF5AB-3FD9-4E55-8C38-217D1828FEA9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sg3428xf_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8E7ADAA5-8212-4DA0-BD36-CC580E7AE8F9", "versionEndExcluding": "1.20.16", "versionStartIncluding": "1.20.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:tp-link:omada_sg3428xf_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BEBCE3C6-5845-47FB-9083-8184FCFEABDE", "versionEndExcluding": "1.30.1", "versionStartIncluding": "1.30.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sg3428xf:-:*:*:*:*:*:*:*", "matchCriteriaId": "11906635-9EFA-4B5F-BDAC-C1A7E26BF000", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sg3428x-m2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EB7D6F58-521B-46E1-B4B3-4D3061F220CA", "versionEndExcluding": "1.20.18", "versionStartIncluding": "1.20.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sg3428x-m2:-:*:*:*:*:*:*:*", "matchCriteriaId": "502642DB-FF8E-4F7F-B565-83B3C2A991B4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sg3428xmp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4746C846-0749-4F65-B9C4-55736215623B", "versionEndExcluding": "3.20.21", "versionStartIncluding": "3.20.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:tp-link:omada_sg3428xmp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F19CA3D9-CEA5-4766-8956-61DA87281D06", "versionEndExcluding": "3.30.1", "versionStartIncluding": "3.30.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sg3428xmp:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B2A4332-30CA-485B-A70D-8EFD9C54EC58", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sg3428xmpp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B4B2A11B-58BB-477A-88BA-960411B615D8", "versionEndExcluding": "1.0.16", "versionStartIncluding": "1.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:tp-link:omada_sg3428xmpp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "67D7112F-4EC9-4544-A60B-80933896C9E7", "versionEndExcluding": "1.20.1", "versionStartIncluding": "1.20.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sg3428xmpp:-:*:*:*:*:*:*:*", "matchCriteriaId": "3678FDA8-8965-48FA-9D3B-6FDF1DB4B18F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sg3428xpp-m2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1646A141-C063-4B17-A960-05EE85A41C4B", "versionEndExcluding": "1.20.19", "versionStartIncluding": "1.20.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sg3428xpp-m2:-:*:*:*:*:*:*:*", "matchCriteriaId": "62CE4DBE-BA37-4ECA-A8B0-4CABEEC4470F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sg3452_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "40E75594-8230-4ECA-A0DB-A2E4DD2E24E5", "versionEndExcluding": "1.20.17", "versionStartIncluding": "1.20.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:tp-link:omada_sg3452_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3CCE1D70-D3E2-4777-B72A-4F9F33740D94", "versionEndExcluding": "1.30.1", "versionStartIncluding": "1.30.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sg3452:-:*:*:*:*:*:*:*", "matchCriteriaId": "7050BD01-596D-42B1-AAA9-470CFF33F64A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sg3452p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1297948B-786C-4A87-AD96-9B7B5110A693", "versionEndExcluding": "3.30.17", "versionStartIncluding": "3.30.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:tp-link:omada_sg3452p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "36F354A4-73B7-4E73-9900-AB659E719A71", "versionEndExcluding": "3.40.1", "versionStartIncluding": "3.40.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sg3452p:-:*:*:*:*:*:*:*", "matchCriteriaId": "5B808CBF-10B8-4E0A-86E6-3936C39B98D7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sg3452x_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E7139693-6A51-4A00-A4FB-9D70E015B220", "versionEndExcluding": "1.20.18", "versionStartIncluding": "1.20.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:tp-link:omada_sg3452x_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BCA5EC76-22F8-4543-AD58-707E97CCE19B", "versionEndExcluding": "1.30.1", "versionStartIncluding": "1.30.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sg3452x:-:*:*:*:*:*:*:*", "matchCriteriaId": "55C3A44F-0D3A-408E-AD90-CDA8001DEBC6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sg3452xmpp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EFC1C04B-C449-4E80-BBCD-86EA39A2219E", "versionEndExcluding": "1.0.15", "versionStartIncluding": "1.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sg3452xmpp:-:*:*:*:*:*:*:*", "matchCriteriaId": "B826EA38-D173-4331-A406-39DD4AB99AC2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sg3452xp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E9AEFEF1-8513-4653-95C0-732B0C09B258", "versionEndExcluding": "2.20.20", "versionStartIncluding": "2.20.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:tp-link:omada_sg3452xp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6BCA7E5F-198B-434A-86E5-D498B55EB105", "versionEndExcluding": "2.30.1", "versionStartIncluding": "2.30.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sg3452xp:-:*:*:*:*:*:*:*", "matchCriteriaId": "1863A24C-9CB3-42FB-8144-C63224D5B399", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sl2428p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BF3463F2-C828-4663-8BF1-3480582B2174", "versionEndExcluding": "6.20.18", "versionStartIncluding": "6.20.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sl2428p:-:*:*:*:*:*:*:*", "matchCriteriaId": "CA3A7E58-B90E-4623-A0C2-C0826F6B9B58", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sx3008f_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9F2480D2-A33E-437F-8880-6A3EC05DA274", "versionEndExcluding": "1.20.12", "versionStartIncluding": "1.20.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sx3008f:-:*:*:*:*:*:*:*", "matchCriteriaId": "D73C0E40-698E-433A-9125-801770D1164A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sx3016f_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7CFD7778-C51F-47C4-93CA-C1B9CB9F66C0", "versionEndExcluding": "1.20.16", "versionStartIncluding": "1.20.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:tp-link:omada_sx3016f_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "70111915-F659-4287-B940-9A822C5CAD9C", "versionEndExcluding": "1.30.1", "versionStartIncluding": "1.30.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sx3016f:-:*:*:*:*:*:*:*", "matchCriteriaId": "D814737F-44E5-4352-A37A-1C54EB8E41D7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sx3032f_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "14C35B6E-BC52-4048-A048-DEDFE7036EF4", "versionEndExcluding": "1.0.15", "versionStartIncluding": "1.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sx3032f:-:*:*:*:*:*:*:*", "matchCriteriaId": "79CB0C2F-EF20-4685-A11B-EF0E59AE0AF2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sx3206hpp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "644FA08E-2B0E-494A-9EE1-EB5AACB45DB3", "versionEndExcluding": "1.20.12", "versionStartIncluding": "1.20.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sx3206hpp:-:*:*:*:*:*:*:*", "matchCriteriaId": "8D4B1462-A413-4834-9B93-D068AE96564E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sx3832_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E11AE377-EC29-4207-A497-4FA5DCCE23E4", "versionEndExcluding": "1.0.12", "versionStartIncluding": "1.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sx3832:-:*:*:*:*:*:*:*", "matchCriteriaId": "41240976-9B4B-449B-A464-31AF774B29C9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_sx3832mpp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6BF5012F-EA43-4A3C-96F4-573B469E7D0B", "versionEndExcluding": "1.0.11", "versionStartIncluding": "1.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_sx3832mpp:-:*:*:*:*:*:*:*", "matchCriteriaId": "1A51079F-EEA0-4E29-AD44-D802F696180B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_tl-sg2428p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "532BB83D-FC0A-419A-B0BC-D0FA9D339B52", "versionEndExcluding": "4.0.26", "versionStartIncluding": "4.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_tl-sg2428p:-:*:*:*:*:*:*:*", "matchCriteriaId": "54F0CFE5-2BB0-43DD-937A-334180200850", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_tl-sg3428mp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B7309CE7-FB5B-4FA4-B587-7330F60515C1", "versionEndExcluding": "5.0.25", "versionStartIncluding": "5.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_tl-sg3428mp:-:*:*:*:*:*:*:*", "matchCriteriaId": "A0E6DA7C-A923-48B0-B5F1-ABDA47C04E58", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:omada_tl-sg3452p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3D53B71A-6528-47EE-8A21-B644EBB8AE50", "versionEndExcluding": "3.0.22", "versionStartIncluding": "3.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:omada_tl-sg3452p:-:*:*:*:*:*:*:*", "matchCriteriaId": "43DB8AA3-4E53-4384-A62C-A822D2B46C1C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests. Under specific conditions, this flaw may result in unintended command execution.<br>An unauthenticated attacker with network access to the affected interface may cause memory corruption, service instability, or information disclosure. Successful exploitation may allow remote code execution or denial-of-service."}, {"lang": "es", "value": "La interfaz web en m\u00faltiples switches Omada no valida adecuadamente ciertas entradas externas, lo que puede llevar a acceso a memoria fuera de l\u00edmites al procesar solicitudes manipuladas. Bajo condiciones espec\u00edficas, esta vulnerabilidad puede resultar en ejecuci\u00f3n de comandos no intencionada. Un atacante no autenticado con acceso de red a la interfaz afectada puede causar corrupci\u00f3n de memoria, inestabilidad del servicio o revelaci\u00f3n de informaci\u00f3n. La explotaci\u00f3n exitosa puede permitir ejecuci\u00f3n remota de c\u00f3digo o denegaci\u00f3n de servicio."}], "id": "CVE-2026-1668", "lastModified": "2026-04-02T15:03:02.430", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "NONE", "attackVector": "ADJACENT", "availabilityRequirement": "NOT_DEFINED", "baseScore": 7.7, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "f23511db-6c3e-4e32-a477-6aa17d310630", "type": "Secondary"}]}, "published": "2026-03-13T19:53:58.160", "references": [{"source": "f23511db-6c3e-4e32-a477-6aa17d310630", "tags": ["Product"], "url": "https://support.omadanetworks.com/au/download/firmware/"}, {"source": "f23511db-6c3e-4e32-a477-6aa17d310630", "tags": ["Product"], "url": "https://support.omadanetworks.com/en/download/firmware/"}, {"source": "f23511db-6c3e-4e32-a477-6aa17d310630", "tags": ["Vendor Advisory"], "url": "https://support.omadanetworks.com/us/document/118794/"}, {"source": "f23511db-6c3e-4e32-a477-6aa17d310630", "tags": ["Product"], "url": "https://support.omadanetworks.com/us/product/"}], "sourceIdentifier": "f23511db-6c3e-4e32-a477-6aa17d310630", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "f23511db-6c3e-4e32-a477-6aa17d310630", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{"affected": [{"configurations": [{"platform": ["sg2005p-pd(un)_1.0", "sg2005p-pd(un)_1.6"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.0.19 Build 20260121 Rel.53429)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG2005P-PD 1.x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg2005p-pd", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg2008(un)_4.30", "sg2008(un)_4.36"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,4.30.1 Build 20260127 Rel.32017)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG2008 4.3x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg2008", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg2008(un)_4.20", "sg2008(un)_4.26"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,4.20.17 Build 20260121 Rel.53429)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG2008 4.2x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg2008", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg2008p(un)_hardware_version_3.20", "sg2008p(un)_hardware_version_3.26"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,3.20.17 Build 20260121 Rel.53429)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG2008P 3.2x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg2008p", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg2008p(un)_hardware_version_3.30", "sg2008p(un)_hardware_version_3.36", "sg2008p(eu)_hardware_version_3.36"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,3.30.1 Build 20260127 Rel.32017)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG2008P 3.3x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg2008p", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg2016p(un)_1.30", "sg2016p(un)_1.36"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.30.1 Build 20260127 Rel.32017)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG2016P 1.3x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg2016p", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg2016p(un)_1.20", "sg2016p(un)_1.26"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.20.17 Build 20260121 Rel.53429)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG2016P 1.2x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg2016p", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg2210mp(un)_5.20", "sg2210mp(in)_5.28", "sg2210mp(eu)_5.26"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,5.20.1 Build 20260127 Rel.32017)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG2210MP 5.2x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg2210mp", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg2210mp(un)_4.20", "sg2210mp(un)_4.26"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,4.20.18 Build 20260121 Rel.53429)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG2210MP 4.2x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg2210mp", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg2210mp(un)_5.0", "sg2210mp(in)_5.8"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,5.0.15 Build 20260121 Rel.53429)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG2210MP 5.x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg2210mp", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg2210p(un)_5.30", "sg2210p(un)_5.36", "sg2210p(br)_5.36", "sg2210p(in)_5.38", "sg2210p(eu)_5.36"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,5.30.1 Build 20260127 Rel.32017)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG2210P 5.3x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg2210p", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg2210p(un)_5.20", "sg2210p(in)_5.28", "sg2210p(un)_5.26"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,5.20.18 Build 20260121 Rel.53429)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG2210P 5.2x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg2210p", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg2210xmp-m2(un)_1.0", "sg2210xmp-m2(un)_1.6"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.0.19 Build 20260121 Rel.53314)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG2210XMP-M2 1.x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg2210xmp", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg2218(un)_1.30", "sg2218(un)_1.36"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.30.1 Build 20260127 Rel.32017)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG2218 1.3x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg2218", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg2218(un)_1.20", "sg2218(un)_1.26"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.20.17 Build 20260121 Rel.53429)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG2218 1.2x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg2218", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg2218p(un)_2.20", "sg2218p(un)_2.26"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,2.20.2 Build 20260127 Rel.32017)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG2218P 2.2x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg2218p", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg2218p(un)_1.20", "sg2218p(un)_1.26"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.20.17 Build 20260121 Rel.53429)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG2218P 1.2x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg2218p", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg2218p(un)_2.0", "sg2218p(un)_2.6"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,2.0.14 Build 20260121 Rel.53429)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG2218P 2.x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg2218p", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg2428lp(un)_1.0", "sg2428lp(un)_1.6", "sg2428lp(in)_1.8"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.0.15 Build 20260121 Rel.53429)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG2428LP 1.x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg2428lp", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg2428p(un)_5.30", "sg2428p(un)_5.32", "sg2428p(in)_5.33"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,5.30.16 Build 20260121 Rel.53429)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG2428P 5.3x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg2428p", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg2428p(un)_5.20", "sg2428p(un)_5.26"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,5.20.20 Build 20260121 Rel.53429)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG2428P 5.2x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg2428p", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg2452lp(un)_1.0", "sg2452lp(un)_1.6", "sg2452lp(in)_1.8"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.0.13 Build 20260121 Rel.54132)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG2452LP 1.x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg2452lp", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg3210(un)_3.30", "sg3210(un)_3.36", "sg3210(in)_3.38"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,3.30.1 Build 20260206 Rel.33103)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG3210 3.3x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg3210", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg3210(un)_3.20", "sg3210(in)_3.28", "sg3210(un)_3.26"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,3.20.17 Build 20260121 Rel.53429)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG3210 3.2x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg3210", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg3210x-m2(un)_1.20", "sg3210x-m2(un)_1.26"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.20.1 Build 20260129 Rel.13605)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG3210X-M2 1.2x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg3210x-m2", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg3210x-m2(un)_1.0", "sg3210x-m2(un)_1.6"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.0.19 Build 20260121 Rel.53314)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG3210X-M2 1.x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg3210x-m2", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg3210xhp-m2(un)_3.0", "sg3210xhp-m2(in)3.8", "sg3210xhp-m2(un)_3.6"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,3.0.21 Build 20260121 Rel.53314)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG3210XHP-M2 3.x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg3210xhp-m2", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg3218xp-m2(un)_1.0", "sg3218xp-m2(un)_1.6"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.0.19 Build 20260121 Rel.53314)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG3218XP-M2 1.x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg3218xp-m2", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg3428(un)_2.40", "sg3428(un)_2.46", "sg3428(br)_2.46", "sg3428(in)_2.48"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,2.40.1 Build 20260127 Rel.39545)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG3428 2.4x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg3428", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg3428(un)_2.30", "sg3428(in)_2.33", "sg3428(un)_2.32"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,2.30.16 Build 20260113 Rel.67732)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG3428 2.3x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg3428", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg3428mp(un)_6.30", "sg3428mp(un)_6.36", "sg3428mp(br)_6.36", "sg3428mp(in)_6.38", "sg3428mp(eu)_6.36"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,6.30.1 Build 20260127 Rel.39545)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG3428MP 6.3x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg3428mp", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg3428mp(un)_6.20", "sg3428mp(in)_6.28", "sg3428mp(un)_6.26"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,6.20.20 Build 20260113 Rel.67732)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG3428MP 6.2x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg3428mp", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg3428x(un)_1.40", "sg3428x(un)_1.46", "sg3428x(eu)_1.46", "sg3428x(in)_1.48"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.40.1 Build 20260127 Rel.39545)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG3428X 1.4x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg3428x", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg3428x(un)_1.30", "sg3428x(in)_1.33", "sg3428x(un)_1.32"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.30.17 Build 20260113 Rel.67732)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG3428X 1.3x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg3428x", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg3428x-m2(un)_1.20", "sg3428x-m2(un)_1.26"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.20.18 Build 20260121 Rel.54271)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG3428X-M2 1.2x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg3428x-m2", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg3428xf(un)_1.30", "sg3428xf(un)_1.36", "sg3428xf(in)_1.38"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.30.1 Build 20260127 Rel.39545)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG3428XF 1.3x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg3428xf", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg3428xf(un)_1.20", "sg3428xf(in)_1.28", "sg3428xf(un)_1.26"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.20.16 Build 20260113 Rel.67732)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG3428XF 1.2x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg3428xf", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg3428xmp(un)_3.30", "sg3428xmp(un)_3.36", "sg3428xmp(eu)_3.36", "sg3428xmp(in)_3.38"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,3.30.1 Build 20260127 Rel.39545)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG3428XMP 3.3x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg3428xmp", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg3428xmp(un)_3.20", "sg3428xmp(in)_3.28", "sg3428xmp(un)_3.26"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,3.20.21 Build 20260113 Rel.67732)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG3428XMP 3.2x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg3428xmp", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg3428xmpp(un)_1.20", "sg3428xmpp(un)_1.26"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.20.1 Build 20260127 Rel.39545)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG3428XMPP 1.2x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg3428xmpp", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg3428xmpp(un)_1.0", "sg3428xmpp(in)_1.8", "sg3428xmpp(un)_1.6"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.0.16 Build 20260113 Rel.67732)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG3428XMPP 1.x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg3428xmpp", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg3428xpp-m2(un)_1.20", "sg3428xpp-m2(un)_1.26"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.20.19 Build 20260121 Rel.54271)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG3428XPP-M2 1.2x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg3428xpp-m2", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg3452(un)_1.30", "sg3452(un)_1.36", "sg3452(in)_1.38"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.30.1 Build 20260128 Rel.7041)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG3452 1.3x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg3452", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg3452(un)_1.20", "sg3452(in)_1.28", "sg3452(un)_1.26"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.20.17 Build 20260121 Rel.54132)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG3452 1.2x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg3452", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg3452p(un)_3.40", "sg3452p(un)_3.46", "sg3452p(in)_3.48"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,3.40.1 Build 20260128 Rel.7041)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG3452P 3.4x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg3452p", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg3452p(un)_3.30", "sg3452p(in)_3.33", "sg3452p(un)_3.32"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,3.30.17 Build 20260121 Rel.54132)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG3452P 3.3x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg3452p", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg3452x(un)_1.30", "sg3452x(un)_1.36", "sg3452x(in)_1.38"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.30.1 Build 20260128 Rel.8721)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG3452X 1.3x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg3452x", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg3452x(un)_1.20", "sg3452x(un)_1.26"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.20.18 Build 20260121 Rel.55833)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG3452X 1.2x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg3452x", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg3452xmpp(un)_1.0", "sg3452xmpp(un)_1.6", "sg3452xmpp(in)_1.8"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.0.15 Build 20260121 Rel.55833)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG3452XMPP 1.x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg3452xmpp", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg3452xp(un)_2.30", "sg3452xp(un)_2.36", "sg3452xp(in)_2.38"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,2.30.1 Build 20260128 Rel.8721)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG3452XP 2.3x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg3452xp", "vendor": "tp-link"}, {"configurations": [{"platform": ["sg3452xp(un)_2.20", "sg3452xp(un)_2.26"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,2.20.20 Build 20260121 Rel.55833)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SG3452XP 2.2x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sg3452xp", "vendor": "tp-link"}, {"configurations": [{"platform": ["sl2428p(un)_6.20", "sl2428p(un)_6.26"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,6.20.18 Build 20260121 Rel.53429)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SL2428P 6.2x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sl2428p", "vendor": "tp-link"}, {"configurations": [{"platform": ["sx3008f(un)_1.20", "sx3008f(in)1.28", "sx3008f(un)_1.26"], "status": "affected", "versions": null}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SX3008F 1.2x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sx3008f", "vendor": "tp-link"}, {"configurations": [{"platform": ["sx3016f(un)_hardware_version_1.30", "sx3016f(un)_hardware_version_1.36", "sx3016f(in)_hardware_version_1.38"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.30.1 Build 20260129 Rel.8831)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SX3016F 1.3x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sx3016f", "vendor": "tp-link"}, {"configurations": [{"platform": ["sx3016f(un)_hardware_version_1.20", "sx3016f(un)_hardware_version_1.26", "sx3016f(in)_hardware_version_1.28"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.20.16 Build 20260121 Rel.57953)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SX3016F 1.2x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sx3016f", "vendor": "tp-link"}, {"configurations": [{"platform": ["sx3032f(un)_1.0", "sx3032f(un)_1.6"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.0.15 Build 20260121 Rel.56907)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SX3032F 1.x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sx3032f", "vendor": "tp-link"}, {"configurations": [{"platform": ["sx3206hpp(un)_1.20"], "status": "affected", "versions": null}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SX3206HPP 1.20", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sx3206hpp", "vendor": "tp-link"}, {"configurations": [{"platform": ["sx3832(un)_1.0", "sx3832(un)_1.6"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.0.12 Build 20260121 Rel.56907)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SX3832 1.x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sx3832", "vendor": "tp-link"}, {"configurations": [{"platform": ["sx3832mpp(un)_1.0", "sx3832mpp(un)_1.6"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.0.11 Build 20260121 Rel.56907)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "SX3832MPP 1.x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "sx3832mpp", "vendor": "tp-link"}, {"configurations": [{"platform": ["tl-sg2428p(un)_4.0", "tl-sg2428p(un)_4.6"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,4.0.26 Build 20260121 Rel.53429)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "TL-SG2428P 4.x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "tl-sg2428p", "vendor": "tp-link"}, {"configurations": [{"platform": ["tl-sg3428mp(un)_5.0", "tl-sg3428mp(un)_5.6", "tl-sg3428mp(un)_5.20", "tl-sg3428mp(un)_5.26"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,5.0.25 Build 20260113 Rel.67732)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "TL-SG3428MP 5.x", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "tl-sg3428mp", "vendor": "tp-link"}, {"configurations": [{"platform": ["tl-sg3452p(un)_3.0"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,3.0.22 Build 20260121 Rel.54132)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "TL-SG3452P 3.0", "source": "cna", "vendor": "TP-Link Systems Inc."}, "product": "tl-sg3452p", "vendor": "tp-link"}], "analysis": {"en": {"generated_at": "2026-04-02T16:49:56.380294+00:00", "value": {"mitigation_remediation": ["Update all affected Omada switches to the latest firmware releases that address input validation and memory handling issues.", "Restrict network access to the switch web interface, allowing connections only from trusted management networks or VPN endpoints.", "Disable or remove remote configuration features if not required for operations.", "Implement rigorous network monitoring to detect anomalous or malformed HTTP requests targeting the device.", "Verify that firmware updates have been successfully applied and confirm device stability after patching."], "summary": {"action": "Immediate Patch", "impact": "Remote Code Execution / Denial of Service due to memory corruption in the web interface"}, "threat_synthesis": {"affected_systems": "TP\u2011Link Systems Omada switch models are affected, including SG2005P\u2011PD, SG2008, SG2008P, SG2016P, SG2210MP, SG2210P, SG2210XMP\u2011M2, SG2218, SG2218P, SG2428LP, SG2428P, SG2452LP, SG3210, SG3210X\u2011M2, SG3210XHP\u2011M2, SG3218XP\u2011M2, SG3428, SG3428MP, SG3428X, SG3428X\u2011M2, SG3428XF, SG3428XMP, SG3428XMPP, SG3428XPP\u2011M2, SG3452, SG3452P, SG3452X, SG3452XP, SL2428P, SX3008F, SX3016F, SX3032F, SX3206HPP, SX3832, SX3832MPP, TL\u2011SG2428P, TL\u2011SG3428MP, and TL\u2011SG3452P. Firmware versions containing the suffix \u2019x\u2019 (e.g., 1.x, 4.x) are included in the affected set.", "description_and_impact": "The Omada switch web interface lacks proper input validation, causing out-of-bounds memory accesses when handling crafted requests. An unauthenticated attacker with network reach to the management interface can exploit this to corrupt memory, trigger service instability, leak information, or execute arbitrary commands. The vulnerability is classified as CWE\u201120 (Improper Input Validation) and CWE\u2011787 (Out\u2011of\u2011Bounds Write).", "risk_and_exploitability": "The CVSS score of 7.7 indicates moderate-to-high severity, while an EPSS score of less than 1\u202f% suggests a low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires network access to the web interface and does not require authentication, allowing an attacker to send specially crafted HTTP requests that may lead to memory corruption or remote code execution. Despite the low exploitation likelihood, the potential impact is significant: compromised switches could disrupt network operations or provide a foothold for further attacks. Prompt mitigation is therefore recommended."}}}}, "created": "2026-03-16T09:25:01.028851+00:00", "updated": "2026-04-02T20:23:50.185962+00:00", "vendors": ["tp-link", "tp-link$PRODUCT$sg2005p-pd", "tp-link$PRODUCT$sg2008", "tp-link$PRODUCT$sg2008p", "tp-link$PRODUCT$sg2016p", "tp-link$PRODUCT$sg2210mp", "tp-link$PRODUCT$sg2210p", "tp-link$PRODUCT$sg2210xmp", "tp-link$PRODUCT$sg2218", "tp-link$PRODUCT$sg2218p", "tp-link$PRODUCT$sg2428lp", "tp-link$PRODUCT$sg2428p", "tp-link$PRODUCT$sg2452lp", "tp-link$PRODUCT$sg3210", "tp-link$PRODUCT$sg3210x-m2", "tp-link$PRODUCT$sg3210xhp-m2", "tp-link$PRODUCT$sg3218xp-m2", "tp-link$PRODUCT$sg3428", "tp-link$PRODUCT$sg3428mp", "tp-link$PRODUCT$sg3428x", "tp-link$PRODUCT$sg3428x-m2", "tp-link$PRODUCT$sg3428xf", "tp-link$PRODUCT$sg3428xmp", "tp-link$PRODUCT$sg3428xmpp", "tp-link$PRODUCT$sg3428xpp-m2", "tp-link$PRODUCT$sg3452", "tp-link$PRODUCT$sg3452p", "tp-link$PRODUCT$sg3452x", "tp-link$PRODUCT$sg3452xmpp", "tp-link$PRODUCT$sg3452xp", "tp-link$PRODUCT$sl2428p", "tp-link$PRODUCT$sx3008f", "tp-link$PRODUCT$sx3016f", "tp-link$PRODUCT$sx3032f", "tp-link$PRODUCT$sx3206hpp", "tp-link$PRODUCT$sx3832", "tp-link$PRODUCT$sx3832mpp", "tp-link$PRODUCT$tl-sg2428p", "tp-link$PRODUCT$tl-sg3428mp", "tp-link$PRODUCT$tl-sg3452p"]}