TP-LINK PATCHES OMAHA ZTP FLAWS ALLOWING HACKERS TO BREACH NETWORKS

Summary from the TLDR InfoSec newsletter

TP-Link patched 15 vulnerabilities in the zero-touch provisioning (ZTP) mechanism of its Omada network devices. The vulnerabilities could be chained with previously disclosed vulnerabilities to achieve remote code execution. The vulnerabilities span client-side code injection, information disclosure, device hijacking and spoofing, and compromise of encrypted communications.