Statement on Vulnerabilities Noted in Omada System Report

TP-Link has promptly addressed and resolved vulnerabilities noted in a recent Omada system report. Firmware updates fixing these vulnerabilities were made available on TP-Link website prior to the report being published.

The related devices had received update notifications when managed by the controller. We strongly recommend users to download and update to the new firmware.

Related Models and download links are below:

Model	Version	Firmware	Release Time
EAP225(US)	v3	EAP225V3_5.1.6 Build 20240313	Apr. 03, 2024
EAP225(EU)	v3	EAP225V3_5.1.6 Build 20240313	Apr. 07, 2024
EAP115	v4	EAP115V4_5.0.9 Build 20240228	Apr. 01, 2024
ER7206	v1	ER7206(UN)_V1_1.4.1 Build 20240117 and above	Feb. 01, 2024
ER7206	v2	ER7206(UN)_V2_2.1.1 Build 20240110 and above	Jan. 12, 2024

After further investigation, Omada softer controller is not affected, and the source report has corrected the information.