CVE-2025-30241
Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input properly before passing it to system-level command execution functions. An authenticated adjacent attacker may inject specially crafted input to execute arbitrary operation system commands with elevated privileges. Successful exploitation may allow execution of arbitrary system commands, potentially leading to full device compromise.
Published:Aug 10, 2026
Last Modified:Aug 12, 2026
EPS:Aug 10, 2026
EPSS Score:0.00493
CVSS Score:8.6
Affected Products
Vendor
Product
Action
Vendor
Tp-link
Product
Eb210 Pro(eu1) 1.0
Tp-link
Eb210 Pro(eu1) 1.0
Vendor
Tp-link
Product
Eb210 Pro(us1) 1.0
Tp-link
Eb210 Pro(us1) 1.0
Vendor
Tp-link
Product
Eb810v(eu1) V1.0
Tp-link
Eb810v(eu1) V1.0
Vendor
Tp-link
Product
Ex220(br) V1.0/1.20/1.28/1.29/1.8
Tp-link
Ex220(br) V1.0/1.20/1.28/1.29/1.8
Vendor
Tp-link
Product
Ex220(br) V2.0
Tp-link
Ex220(br) V2.0
Vendor
Tp-link
Product
Ex220(eu1) V1.0/1.20
Tp-link
Ex220(eu1) V1.0/1.20
Vendor
Tp-link
Product
Ex220(ru) V1.0
Tp-link
Ex220(ru) V1.0
Vendor
Tp-link
Product
Ex220(us1) V1.0
Tp-link
Ex220(us1) V1.0
Vendor
Tp-link
Product
Ex222(eu1) V1.0
Tp-link
Ex222(eu1) V1.0
Vendor
Tp-link
Product
Ex222(kr) V1.0
Tp-link
Ex222(kr) V1.0
Vendor
Tp-link
Product
Ex222(us1) V1.0
Tp-link
Ex222(us1) V1.0
Vendor
Tp-link
Product
Ex520v(eu1)1.0
Tp-link
Ex520v(eu1)1.0
Vendor
Tp-link
Product
Ex820v(eu1) V1.0
Tp-link
Ex820v(eu1) V1.0
Vendor
Tp-link
Product
Ex920(us2) V1.6/v1.0
Tp-link
Ex920(us2) V1.6/v1.0
Vendor
Tp-link
Product
Hb210(eu1) 1.0
Tp-link
Hb210(eu1) 1.0
Vendor
Tp-link
Product
Hb210(us2) 1.0
Tp-link
Hb210(us2) 1.0
Vendor
Tp-link
Product
Hb210 Pro(eu1)1.0
Tp-link
Hb210 Pro(eu1)1.0
Vendor
Tp-link
Product
Hb210 Pro(us2)1.0/1.6
Tp-link
Hb210 Pro(us2)1.0/1.6
Vendor
Tp-link
Product
Hb410( Eu1) 1.0
Tp-link
Hb410( Eu1) 1.0
Vendor
Tp-link
Product
Hb610(ca) V2.0
Tp-link
Hb610(ca) V2.0
Vendor
Tp-link
Product
Hb610(eu1)
Tp-link
Hb610(eu1)
Vendor
Tp-link
Product
Hb610(us2) V2.6/2.0
Tp-link
Hb610(us2) V2.6/2.0
Vendor
Tp-link
Product
Hb710(eu1) 1.0
Tp-link
Hb710(eu1) 1.0
Vendor
Tp-link
Product
Hb710(us2) V1.6/1.0
Tp-link
Hb710(us2) V1.6/1.0
Vendor
Tp-link
Product
Hb810(eu1) V2.0
Tp-link
Hb810(eu1) V2.0
Vendor
Tp-link
Product
Hb810(us2) V1.0/1.6/2.0/2.6
Tp-link
Hb810(us2) V1.0/1.6/2.0/2.6
Vendor
Tp-link
Product
Vx420-g2h(au) V3.0
Tp-link
Vx420-g2h(au) V3.0
Vendor
Tp-link
Product
Vx800v(de) V1.0
Tp-link
Vx800v(de) V1.0
Vendor
Tp-link
Product
Xx230v(br) V1.0
Tp-link
Xx230v(br) V1.0
Vendor
Tp-link
Product
Xx530v(br)v2.0
Tp-link
Xx530v(br)v2.0
Vendor
Tp-link
Product
Xx530v(eu1)
Tp-link
Xx530v(eu1)
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
