CVE Feed

    Dashboard / CVE / CVE-2025-30241

    CVE-2025-30241

    Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input properly before passing it to system-level command execution functions.  An authenticated adjacent attacker may inject specially crafted input to execute arbitrary operation system commands with elevated privileges. Successful exploitation may allow execution of arbitrary system commands, potentially leading to full device compromise.

    Published:Aug 10, 2026
    Last Modified:Aug 12, 2026
    EPS:Aug 10, 2026
    EPSS Score:0.00493
    CVSS Score:8.6

    Affected Products

    Vendor
    Tp-link
    Product
    Eb210 Pro(eu1) 1.0
    Vendor
    Tp-link
    Product
    Eb210 Pro(us1) 1.0
    Vendor
    Tp-link
    Product
    Eb810v(eu1) V1.0
    Vendor
    Tp-link
    Product
    Ex220(br) V1.0/1.20/1.28/1.29/1.8
    Vendor
    Tp-link
    Product
    Ex220(br) V2.0
    Vendor
    Tp-link
    Product
    Ex220(eu1) V1.0/1.20
    Vendor
    Tp-link
    Product
    Ex220(ru) V1.0
    Vendor
    Tp-link
    Product
    Ex220(us1) V1.0
    Vendor
    Tp-link
    Product
    Ex222(eu1) V1.0
    Vendor
    Tp-link
    Product
    Ex222(kr) V1.0
    Vendor
    Tp-link
    Product
    Ex222(us1) V1.0
    Vendor
    Tp-link
    Product
    Ex520v(eu1)1.0
    Vendor
    Tp-link
    Product
    Ex820v(eu1) V1.0
    Vendor
    Tp-link
    Product
    Ex920(us2) V1.6/v1.0
    Vendor
    Tp-link
    Product
    Hb210(eu1) 1.0
    Vendor
    Tp-link
    Product
    Hb210(us2) 1.0
    Vendor
    Tp-link
    Product
    Hb210 Pro(eu1)1.0
    Vendor
    Tp-link
    Product
    Hb210 Pro(us2)1.0/1.6
    Vendor
    Tp-link
    Product
    Hb410( Eu1) 1.0
    Vendor
    Tp-link
    Product
    Hb610(ca) V2.0
    Vendor
    Tp-link
    Product
    Hb610(eu1)
    Vendor
    Tp-link
    Product
    Hb610(us2) V2.6/2.0
    Vendor
    Tp-link
    Product
    Hb710(eu1) 1.0
    Vendor
    Tp-link
    Product
    Hb710(us2) V1.6/1.0
    Vendor
    Tp-link
    Product
    Hb810(eu1) V2.0
    Vendor
    Tp-link
    Product
    Hb810(us2) V1.0/1.6/2.0/2.6
    Vendor
    Tp-link
    Product
    Vx420-g2h(au) V3.0
    Vendor
    Tp-link
    Product
    Vx800v(de) V1.0
    Vendor
    Tp-link
    Product
    Xx230v(br) V1.0
    Vendor
    Tp-link
    Product
    Xx530v(br)v2.0
    Vendor
    Tp-link
    Product
    Xx530v(eu1)

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High