CVE-2025-15628 is a vulnerability in TP-Link Systems Inc. Omada Gateways involving the use of hard-coded embedded certificates shared across deployments. These certificates establish trust between controllers and managed devices. If an attacker obtains these embedded certificates, they may impersonate trusted controllers or devices, enabling interception of communications. The vulnerability is classified under CWE-798 (Use of Hard-coded Credentials) and has a CVSS 4.0 base score of 8.2 (high severity). No vendor advisory or patch information is currently available, and the affected versions are not explicitly stated.

An attacker who gains access to the embedded certificates can impersonate trusted controllers or devices within the Omada Gateway environment. This can lead to interception and potential manipulation of communications between controllers and managed devices, compromising confidentiality and integrity of network management traffic.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix or mitigation is provided by TP-Link, organizations should consider restricting physical and network access to Omada Gateway devices to reduce the risk of certificate compromise.