本ページは tp-link er7212pc_firmware に影響する公開済み CVE（NVD の CPE 経由で関連付け）を列挙します。各行に深刻度指標・概要・公開日が含まれます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2025-9290 | An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values. Exploitation requires advanced network positioning and allows an attacker to intercept adoption traffic and forge valid authentication through offline precomputation, potentially exposing sensitive information and compromising confidentiality. | f23511db-6c3e-4e32-a477-6aa17d310630 | 6.0 | 0.20% | 2026-01-22 | 2026-06-17 |
| CVE-2025-7851 | An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways. | f23511db-6c3e-4e32-a477-6aa17d310630 | 8.7 | 0.59% | 2025-10-20 | 2026-06-17 |
| CVE-2025-7850 | A command injection vulnerability may be exploited after the admin's authentication on the web portal on Omada gateways. | f23511db-6c3e-4e32-a477-6aa17d310630 | 9.3 | 2.17% | 2025-10-20 | 2026-06-17 |
| CVE-2025-6542 | An arbitrary OS command may be executed on the product by a remote unauthenticated attacker. | f23511db-6c3e-4e32-a477-6aa17d310630 | 9.3 | 0.89% | 2025-10-20 | 2026-06-17 |
| CVE-2025-6541 | An arbitrary OS command may be executed on the product by the user who can log in to the web management interface. | f23511db-6c3e-4e32-a477-6aa17d310630 | 8.6 | 0.62% | 2025-10-20 | 2026-06-17 |