02 Records
FEED: ACQUIRING
01 RecordSTATE: PUBLISHED
02 Description
CNA: TPLinkInput Validation Vulnerability on Multiple Omada Switches
03 Exploitation and scoring
SRC: CISA, FIRST, NVD, RED HAT- Exploitation
- Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.
- SSVC decision
- ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
- AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
- Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.
CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.- EPSS probability
- 0.97% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Ranks above 59.3% of scored records. A rank, not a probability.
- NVD base score
- 7.7 (CVSS v4.0), scored by the NVD independently of the CNA.
- NVD CVSS vector
- CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- NVD analysis status
- Analyzed. NVD last modified this record on 2026-06-17.
- Red Hat severity
- No Red Hat rating. Red Hat rates the CVEs that affect its products.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
SCHEMA: 5.2
- Published
- 2026-03-13 16:53Z5 MO AGO
- Last updated
- 2026-03-13 18:09Z5 MO AGO
- Reserved
- 2026-01-29
- Assigning CNA
- TPLink
- Record state
- PUBLISHED
- Severity
- High (CVSS 7.7)
- CNA CVSS vector
- CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
- Weaknesses
- CWE-20Improper Input ValidationClass
- CWE-787Out-of-bounds WriteBase
- Data version
- 5.2
- Document digest
- 692d416184db3da236be60c48b0fc53b76d827defeb1f4be19a57e8e2caa9feb
05 Affected products
PAIRS: 62VendorProductVersionsPlatforms
TP-Link Systems Inc.SG2008P 3.2x0 to < 3.20.17 Build 20260121 Rel.53429SG2008P(UN) hardware version 3.20, SG2008P(UN) hardware version 3.26 TP-Link Systems Inc.SG2008P 3.3x0 to < 3.30.1 Build 20260127 Rel.32017SG2008P(UN) hardware version 3.30, SG2008P(UN) hardware version 3.36, SG2008P(EU) hardware version 3.36 TP-Link Systems Inc.SX3016F 1.3x0 to < 1.30.1 Build 20260129 Rel.8831SX3016F(UN) hardware version 1.30, SX3016F(UN) hardware version 1.36, SX3016F(IN) hardware version 1.38 TP-Link Systems Inc.SX3016F 1.2x0 to < 1.20.16 Build 20260121 Rel.57953SX3016F(UN) hardware version 1.20, SX3016F(UN) hardware version 1.26, SX3016F(IN) hardware version 1.28 TP-Link Systems Inc.SG3428 2.4x0 to < 2.40.1 Build 20260127 Rel.39545SG3428(UN) 2.40, SG3428(UN) 2.46, SG3428(BR) 2.46, SG3428(IN) 2.48 TP-Link Systems Inc.SG3428XMP 3.3x0 to < 3.30.1 Build 20260127 Rel.39545SG3428XMP(UN) 3.30, SG3428XMP(UN) 3.36, SG3428XMP(EU) 3.36, SG3428XMP(IN) 3.38 TP-Link Systems Inc.SG3428X 1.4x0 to < 1.40.1 Build 20260127 Rel.39545SG3428X(UN) 1.40, SG3428X(UN) 1.46, SG3428X(EU) 1.46, SG3428X(IN) 1.48 TP-Link Systems Inc.SG3428XF 1.3x0 to < 1.30.1 Build 20260127 Rel.39545SG3428XF(UN) 1.30, SG3428XF(UN) 1.36, SG3428XF(IN) 1.38 TP-Link Systems Inc.SG3452P 3.4x0 to < 3.40.1 Build 20260128 Rel.7041SG3452P(UN) 3.40, SG3452P(UN) 3.46, SG3452P(IN) 3.48 TP-Link Systems Inc.SG3428MP 6.3x0 to < 6.30.1 Build 20260127 Rel.39545SG3428MP(UN) 6.30, SG3428MP(UN) 6.36, SG3428MP(BR) 6.36, SG3428MP(IN) 6.38, SG3428MP(EU) 6.36 TP-Link Systems Inc.SG2218P 2.2x0 to < 2.20.2 Build 20260127 Rel.32017SG2218P(UN) 2.20, SG2218P(UN) 2.26 TP-Link Systems Inc.SG2016P 1.3x0 to < 1.30.1 Build 20260127 Rel.32017SG2016P(UN) 1.30, SG2016P(UN) 1.36 TP-Link Systems Inc.SG3452XP 2.3x0 to < 2.30.1 Build 20260128 Rel.8721SG3452XP(UN) 2.30, SG3452XP(UN) 2.36, SG3452XP(IN) 2.38 TP-Link Systems Inc.SG3428XMPP 1.2x0 to < 1.20.1 Build 20260127 Rel.39545SG3428XMPP(UN) 1.20, SG3428XMPP(UN) 1.26 TP-Link Systems Inc.SG3452X 1.3x0 to < 1.30.1 Build 20260128 Rel.8721SG3452X(UN) 1.30, SG3452X(UN) 1.36, SG3452X(IN) 1.38 TP-Link Systems Inc.SG2008 4.3x0 to < 4.30.1 Build 20260127 Rel.32017SG2008(UN) 4.30, SG2008(UN) 4.36 TP-Link Systems Inc.SG3210 3.3x0 to < 3.30.1 Build 20260206 Rel.33103SG3210(UN) 3.30, SG3210(UN) 3.36, SG3210(IN) 3.38 TP-Link Systems Inc.SG2210MP 5.2x0 to < 5.20.1 Build 20260127 Rel.32017SG2210MP(UN) 5.20, SG2210MP(IN) 5.28, SG2210MP(EU) 5.26 TP-Link Systems Inc.SG2210P 5.3x0 to < 5.30.1 Build 20260127 Rel.32017SG2210P(UN) 5.30, SG2210P(UN) 5.36, SG2210P(BR) 5.36, SG2210P(IN) 5.38, SG2210P(EU) 5.36 TP-Link Systems Inc.SG2218 1.3x0 to < 1.30.1 Build 20260127 Rel.32017SG2218(UN) 1.30, SG2218(UN) 1.36 TP-Link Systems Inc.SG3452 1.3x0 to < 1.30.1 Build 20260128 Rel.7041SG3452(UN) 1.30, SG3452(UN) 1.36, SG3452(IN) 1.38 TP-Link Systems Inc.SG3210X-M2 1.2x0 to < 1.20.1 Build 20260129 Rel.13605SG3210X-M2(UN) 1.20, SG3210X-M2(UN) 1.26 TP-Link Systems Inc.SG2210XMP-M2 1.x0 to < 1.0.19 Build 20260121 Rel.53314SG2210XMP-M2(UN) 1.0, SG2210XMP-M2(UN) 1.6 TP-Link Systems Inc.SG2008 4.2x0 to < 4.20.17 Build 20260121 Rel.53429SG2008(UN) 4.20, SG2008(UN) 4.26 TP-Link Systems Inc.SG2218P 1.2x0 to < 1.20.17 Build 20260121 Rel.53429SG2218P(UN) 1.20, SG2218P(UN) 1.26 TP-Link Systems Inc.SG3210 3.2x0 to < 3.20.17 Build 20260121 Rel.53429SG3210(UN) 3.20, SG3210(IN) 3.28, SG3210(UN) 3.26 TP-Link Systems Inc.SG3428X-M2 1.2x0 to < 1.20.18 Build 20260121 Rel.54271SG3428X-M2(UN) 1.20, SG3428X-M2(UN) 1.26 TP-Link Systems Inc.SX3832MPP 1.x0 to < 1.0.11 Build 20260121 Rel.56907SX3832MPP(UN) 1.0, SX3832MPP(UN) 1.6 TP-Link Systems Inc.SG2218 1.2x0 to < 1.20.17 Build 20260121 Rel.53429SG2218(UN) 1.20, SG2218(UN) 1.26 TP-Link Systems Inc.SX3832 1.x0 to < 1.0.12 Build 20260121 Rel.56907SX3832(UN) 1.0, SX3832(UN) 1.6 TP-Link Systems Inc.SG2428LP 1.x0 to < 1.0.15 Build 20260121 Rel.53429SG2428LP(UN) 1.0, SG2428LP(UN) 1.6, SG2428LP(IN) 1.8 TP-Link Systems Inc.SL2428P 6.2x0 to < 6.20.18 Build 20260121 Rel.53429SL2428P(UN) 6.20, SL2428P(UN) 6.26 TP-Link Systems Inc.SG3218XP-M2 1.x0 to < 1.0.19 Build 20260121 Rel.53314SG3218XP-M2(UN) 1.0, SG3218XP-M2(UN) 1.6 TP-Link Systems Inc.SG3210XHP-M2 3.x0 to < 3.0.21 Build 20260121 Rel.53314SG3210XHP-M2(UN) 3.0, SG3210XHP-M2(IN)3.8, SG3210XHP-M2(UN) 3.6 TP-Link Systems Inc.SG2218P 2.x0 to < 2.0.14 Build 20260121 Rel.53429SG2218P(UN) 2.0, SG2218P(UN) 2.6 TP-Link Systems Inc.SG3210X-M2 1.x0 to < 1.0.19 Build 20260121 Rel.53314SG3210X-M2(UN) 1.0, SG3210X-M2(UN) 1.6 TP-Link Systems Inc.SG2428P 5.3x0 to < 5.30.16 Build 20260121 Rel.53429SG2428P(UN) 5.30, SG2428P(UN) 5.32, SG2428P(IN) 5.33 TP-Link Systems Inc.SG2210MP 4.2x0 to < 4.20.18 Build 20260121 Rel.53429SG2210MP(UN) 4.20, SG2210MP(UN) 4.26 TP-Link Systems Inc.SG3452P 3.3x0 to < 3.30.17 Build 20260121 Rel.54132SG3452P(UN) 3.30, SG3452P(IN) 3.33, SG3452P(UN) 3.32 TP-Link Systems Inc.SG3452 1.2x0 to < 1.20.17 Build 20260121 Rel.54132SG3452(UN) 1.20, SG3452(IN) 1.28, SG3452(UN) 1.26 TP-Link Systems Inc.SG2452LP 1.x0 to < 1.0.13 Build 20260121 Rel.54132SG2452LP(UN) 1.0, SG2452LP(UN) 1.6, SG2452LP(IN) 1.8 TP-Link Systems Inc.SX3032F 1.x0 to < 1.0.15 Build 20260121 Rel.56907SX3032F(UN) 1.0, SX3032F(UN) 1.6 TP-Link Systems Inc.SG3452X 1.2x0 to < 1.20.18 Build 20260121 Rel.55833SG3452X(UN) 1.20, SG3452X(UN) 1.26 TP-Link Systems Inc.SG3452XMPP 1.x0 to < 1.0.15 Build 20260121 Rel.55833SG3452XMPP(UN) 1.0, SG3452XMPP(UN) 1.6, SG3452XMPP(IN) 1.8 TP-Link Systems Inc.SG3428XPP-M2 1.2x0 to < 1.20.19 Build 20260121 Rel.54271SG3428XPP-M2(UN) 1.20, SG3428XPP-M2(UN) 1.26 TP-Link Systems Inc.TL-SG3452P 3.00 to < 3.0.22 Build 20260121 Rel.54132TL-SG3452P(UN) 3.0 TP-Link Systems Inc.SG2428P 5.2x0 to < 5.20.20 Build 20260121 Rel.53429SG2428P(UN) 5.20, SG2428P(UN) 5.26 TP-Link Systems Inc.SG2210MP 5.x0 to < 5.0.15 Build 20260121 Rel.53429SG2210MP(UN) 5.0, SG2210MP(IN) 5.8 TP-Link Systems Inc.SG2005P-PD 1.x0 to < 1.0.19 Build 20260121 Rel.53429SG2005P-PD(UN) 1.0, SG2005P-PD(UN) 1.6 TP-Link Systems Inc.SG2016P 1.2x0 to < 1.20.17 Build 20260121 Rel.53429SG2016P(UN) 1.20, SG2016P(UN) 1.26 TP-Link Systems Inc.SG3452XP 2.2x0 to < 2.20.20 Build 20260121 Rel.55833SG3452XP(UN) 2.20, SG3452XP(UN) 2.26 TP-Link Systems Inc.SG3428XMP 3.2x0 to < 3.20.21 Build 20260113 Rel.67732SG3428XMP(UN) 3.20, SG3428XMP(IN) 3.28, SG3428XMP(UN) 3.26 TP-Link Systems Inc.SG3428X 1.3x0 to < 1.30.17 Build 20260113 Rel.67732SG3428X(UN) 1.30, SG3428X(IN) 1.33, SG3428X(UN) 1.32 TP-Link Systems Inc.SG3428XF 1.2x0 to < 1.20.16 Build 20260113 Rel.67732SG3428XF(UN) 1.20, SG3428XF(IN) 1.28, SG3428XF(UN) 1.26 TP-Link Systems Inc.SG3428MP 6.2x0 to < 6.20.20 Build 20260113 Rel.67732SG3428MP(UN) 6.20, SG3428MP(IN) 6.28, SG3428MP(UN) 6.26 TP-Link Systems Inc.TL-SG3428MP 5.x0 to < 5.0.25 Build 20260113 Rel.67732TL-SG3428MP(UN) 5.0, TL-SG3428MP(UN) 5.6, TL-SG3428MP(UN) 5.20, TL-SG3428MP(UN) 5.26 TP-Link Systems Inc.SG3428 2.3x0 to < 2.30.16 Build 20260113 Rel.67732SG3428(UN) 2.30, SG3428(IN) 2.33, SG3428(UN) 2.32 TP-Link Systems Inc.SG3428XMPP 1.x0 to < 1.0.16 Build 20260113 Rel.67732SG3428XMPP(UN) 1.0, SG3428XMPP(IN) 1.8, SG3428XMPP(UN) 1.6 TP-Link Systems Inc.TL-SG2428P 4.x0 to < 4.0.26 Build 20260121 Rel.53429TL-SG2428P(UN) 4.0, TL-SG2428P(UN) 4.6 TP-Link Systems Inc.SG2210P 5.2x0 to < 5.20.18 Build 20260121 Rel.53429SG2210P(UN) 5.20, SG2210P(IN) 5.28, SG2210P(UN) 5.26 2 further entries not shown. The complete list is in the raw JSON document.