Black Hat USA: TP-Link Flaws Put Omada Controllers and Camera Feeds at Risk

Fifteen vulnerabilities discovered in TP-Link's Omada zero-touch provisioning (ZTP) ecosystem expose organizations to device impersonation attacks during network setup, allowing adversaries to intercept credentials, steal VPN keys, and pivot into internal networks. The root issue lies in insecure provisioning workflows and insufficient authentication mechanisms across controllers, gateways, switches, access points, and mobile apps. Zero-touch provisioning is a high-trust process — when its security controls are weak, attackers can exploit the setup phase before defenses are even in place. This also extends to VIGI surveillance cameras, meaning physical security infrastructure could be compromised alongside the network. The breadth of affected product types highlights how a single vendor's ecosystem-wide design flaw can cascade into enterprise-wide exposure.