Omada gateways vulnerabilities

A pre-authentication OS command injection vulnerability in Omada gateways configured as OpenVPN Server allows a remote attacker to inject commands via specially crafted input during OpenVPN connection establishment. Exploitation requires the OpenVPN Server feature to be enabled and the VPN service reachable.

An attacker may obtain a root shell on the underlying OS system under restricted conditions on Omada gateways. The vulnerability concerns gaining root privileges on the gateway's base system.

A command injection vulnerability in the web portal of Omada gateways can be exploited after administrator authentication. An attacker with admin credentials can execute arbitrary commands on the system.