Is CVE-2025-7375 actively exploited?

No active exploitation of CVE-2025-7375 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2025-7375 be exploited remotely?

Partially. CVE-2025-7375 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2025-7375?

CVE-2025-7375 has a CVSS score of 6.5 (MEDIUM).

HOME VULNERABILITIESCVE-2025-7375

MEDIUM

CVE-2025-7375

CWE-20Published: March 5, 2026· Updated: Mar 9, 2026

6.5

CVSS v3.1

EPSS:0.03%probability of exploitation in 30 daysPercentile:6.3th

Official Description

A denial-of-service (DoS) vulnerability was identified in Omada EAP610 v3. An attacker with adjacent network access can send crafted requests to cause the device’s HTTP service to crash. This results in temporary service unavailability until the device is rebooted.

This issue affects Omada EAP610 firmware versions prior to 1.6.0.

NVD Source

Technical Analysis

CVE-2025-7375 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in availability disruption (denial of service), with a CVSS base score of 6.5.