CVE-2020-12475

MEDIUM 5.5CVE-2020-12475 · Published 04/05/2020 · updated 17/06/2026

In short

CVE-2020-12475 is a MEDIUM (CVSS 5.5) vulnerability affecting omada controller (tp-link).
Chance of exploitation in the next 30 days (EPSS): 0.56%, higher than 46.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
omada controller tp-link	`= 3.2.6`	No fix yet

Description

TP-Link Omada Controller Software 3.2.6 allows Directory Traversal for reading arbitrary files via com.tp_link.eap.web.portal.PortalController.getAdvertiseFile in /opt/tplink/EAPController/lib/eap-web-3.2.6.jar.

References

sovietw0rm.wordpress.com/2020/04/29/tp-link-omada-controller-directory-traversal-vulnerability · Exploit

More vulnerabilities in omada controller

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free