CVE Feed

    Dashboard / CVE / CVE-2025-30240

    CVE-2025-30240

    The affected TP-Link Aginet devices do not properly validate symbolic links created on external USB storage devices. By placing a crafted symbolic link on supported storage media, an attacker may cause the system to resolve the link. Successful exploitation may allow unauthorized read access to sensitive files within the device filesystem.

    Published:Aug 10, 2026
    Last Modified:Aug 12, 2026
    EPS:Aug 10, 2026
    EPSS Score:0.00174
    CVSS Score:5.1

    Affected Products

    Vendor
    Tp-link
    Product
    Eb810v(eu1) V1.0
    Vendor
    Tp-link
    Product
    Ex220(br) V1.0/1.20/1.28/1.29/1.8
    Vendor
    Tp-link
    Product
    Ex220(br) V2.0
    Vendor
    Tp-link
    Product
    Ex220(eu1) V1.0/1.20
    Vendor
    Tp-link
    Product
    Ex220(ru) V1.0
    Vendor
    Tp-link
    Product
    Ex220(us1) V1.0
    Vendor
    Tp-link
    Product
    Ex222(eu1) V1.0
    Vendor
    Tp-link
    Product
    Ex222(kr) V1.0
    Vendor
    Tp-link
    Product
    Ex222(us1) V1.0
    Vendor
    Tp-link
    Product
    Ex520v(eu1)1.0
    Vendor
    Tp-link
    Product
    Ex820v(eu1) V1.0
    Vendor
    Tp-link
    Product
    Ex920(us2) V1.6/v1.0
    Vendor
    Tp-link
    Product
    Hb210(eu1) 1.0
    Vendor
    Tp-link
    Product
    Hb210(us2) 1.0
    Vendor
    Tp-link
    Product
    Hb210 Pro(eu1)1.0
    Vendor
    Tp-link
    Product
    Hb210 Pro(us2)1.0/1.6
    Vendor
    Tp-link
    Product
    Hb410( Eu1) 1.0
    Vendor
    Tp-link
    Product
    Hb610(ca) V2.0
    Vendor
    Tp-link
    Product
    Hb610(eu1)
    Vendor
    Tp-link
    Product
    Hb610(us2) V2.6/2.0
    Vendor
    Tp-link
    Product
    Hb710(eu1) 1.0
    Vendor
    Tp-link
    Product
    Hb710(us2) V1.6/1.0
    Vendor
    Tp-link
    Product
    Hb810(eu1) V2.0
    Vendor
    Tp-link
    Product
    Hb810(us2) V1.0/1.6/2.0/2.6
    Vendor
    Tp-link
    Product
    Vx1800v(eu1) V1.0
    Vendor
    Tp-link
    Product
    Vx420-g2h(au) V3.0
    Vendor
    Tp-link
    Product
    Vx800v(de) V1.0
    Vendor
    Tp-link
    Product
    Xc220-g3v(eu1) V2.30
    Vendor
    Tp-link
    Product
    Xc220-g3v(us1) V2.30
    Vendor
    Tp-link
    Product
    Xx530v(br)v1.0
    Vendor
    Tp-link
    Product
    Xx530v(br)v2.0
    Vendor
    Tp-link
    Product
    Xx530v(eu1)
    Vendor
    Tp-link
    Product
    Xx530v(us1)

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High