Vulnerability-Lookup

CVE-2025-30238 (GCVE-0-2025-30238)

Vulnerability from cvelistv5 – Published: 2026-08-10 22:24 – Updated: 2026-08-10 22:24

Title

Privilege Escalation via Improper Authorization in User Management in multiple TP-Link Aginet Devices

Summary

In affected TP-Link Aginet devices, insufficient authorization validation allows authenticated low-privileged users to execute higher-privileged operations. An attacker may perform administrative actions such as creating privileged accounts or modifying critical configuration settings.

Severity

8.6 (High)


                        
                          CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CWE

CWE-863 - Incorrect Authorization

Assigner

TPLink

References

1 reference

URL	Tags
https://www.tp-link.com/us/support/faq/5239/	vendor-advisory

Impacted products

59 products

Vendor	Product	Version
TP-Link Systems Inc.	HB810(US2) V1.0/1.6/2.0/2.6	Affected: 0 , < 0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188n (custom)
TP-Link Systems Inc.	HB810(EU1) V2.0	Affected: 0 , < 0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567n (custom)
TP-Link Systems Inc.	HB710(US2) V1.6/1.0	Affected: 0 , < 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n (custom)
TP-Link Systems Inc.	HB710(EU1) 1.0	Affected: 0 , < 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n (custom)
TP-Link Systems Inc.	HB610(US2) V2.6/2.0	Affected: 0 , < 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n (custom)
TP-Link Systems Inc.	HB610(EU1)	Affected: 0 , < 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n (custom)
TP-Link Systems Inc.	HB610(CA) V2.0	Affected: 0 , < 0.6.0 3.0.0 v60af.0 Build 251216 Rel.46954n (custom)
TP-Link Systems Inc.	HB410( EU1) 1.0	Affected: 0 , < 0.3.0 3.0.0 v60bf.0 Build 250901 Rel.45574n (custom)
TP-Link Systems Inc.	HB210(US2) 1.0	Affected: 0 , < 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n (custom)
TP-Link Systems Inc.	HB210(EU1) 1.0	Affected: 0 , < 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n (custom)
TP-Link Systems Inc.	HB210 Pro(EU1)1.0	Affected: 0 , < 0.5.0 3.0.0 v60d5.0 Build 250922 Rel.13742n (custom)
TP-Link Systems Inc.	HB210 Pro(US2)1.0/1.6	Affected: 0 , < 0.8.0 3.0.0 v60d5.0 Build 260318 Rel.78363n (custom)
TP-Link Systems Inc.	HX510(US1) V2.0	Affected: 0 , < 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n (custom)
TP-Link Systems Inc.	HX510(EU1) V2.0	Affected: 0 , < 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n (custom)
TP-Link Systems Inc.	HX510(CA) V1.0/2.0	Affected: 0 , < 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n (custom)
TP-Link Systems Inc.	HX510(AU) V1.0/2.0	Affected: 0 , < 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n (custom)
TP-Link Systems Inc.	HX510(US2) 2.6	Affected: 0 , < 0.17.0 3.2.2 v6065.0 Build 260722 Rel.10662n (custom)
TP-Link Systems Inc.	HX710(EU1) V1.0	Affected: 0 , < 0.5.0 3.1.10 v6075.0 Build 260511 Rel.47847n (custom)
TP-Link Systems Inc.	HX710 Pro(EU1) V1.0	Affected: 0 , < 0.4.0 3.1.10 v6082.0 Build 260204 Rel.49460n (custom)
TP-Link Systems Inc.	HX220(US1) V1.0/1.0	Affected: 0 , < 0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n (custom)
TP-Link Systems Inc.	HX220(EU1) V1.0	Affected: 0 , < 0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n (custom)
TP-Link Systems Inc.	HX220(CA) V1.0	Affected: 0 , < 0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n (custom)
TP-Link Systems Inc.	HX220(AU) V1.0	Affected: 0 , < 0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n (custom)
TP-Link Systems Inc.	HX141(EU1) V1.0	Affected: 0 , < 1.2.0 3.1.0 v609d.0 Build 260128 Rel.29711n (custom)
TP-Link Systems Inc.	HC220-G5(US1) V1.0/1.6	Affected: 0 , < 0.18.0 2.0.0 v605e.0 Build 250827 Rel.37904n (custom)
TP-Link Systems Inc.	HC220-G5(EU1) V1.20/1.0	Affected: 0 , < 0.18.0 2.0.0 v605e.0 Build 250827 Rel.37904n (custom)
TP-Link Systems Inc.	HC220-G5(BR) V1.30	Affected: 0 , < 0.17.0 2.0.0 v605e.0 Build 250618 Rel.19329n (custom)
TP-Link Systems Inc.	EB210 Pro(EU1) 1.0	Affected: 0 , < 0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901n (custom)
TP-Link Systems Inc.	EB210 Pro(US1) 1.0	Affected: 0 , < 0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901n (custom)
TP-Link Systems Inc.	EB810v(EU1) V1.0	Affected: 0 , < 0.6.0 3.0.0 v608b.0 Build 250613 Rel.10497n (custom)
TP-Link Systems Inc.	EX141(BR) V1.0/1.9	Affected: 0 , < 1.8.0 3.1.0 v608a.0 Build 250425 Rel.40905n (custom)
TP-Link Systems Inc.	EX141(EU1) V1.0	Affected: 0 , < 1.7.0 3.1.0 v608a.0 Build 250418 Rel.8257n (custom)
TP-Link Systems Inc.	EX141(US1) V1.0	Affected: 0 , < 1.7.0 3.1.0 v608a.0 Build 250418 Rel.8257n (custom)
TP-Link Systems Inc.	EX220(BR) V1.0/1.20/1.28/1.29/1.8	Affected: 0 , < 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n (custom)
TP-Link Systems Inc.	EX220(BR) V2.0	Affected: 0 , < 0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732n (custom)
TP-Link Systems Inc.	EX220(EU1) V1.0/1.20	Affected: 0 , < 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n (custom)
TP-Link Systems Inc.	EX220(RU) V1.0	Affected: 0 , < 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n (custom)
TP-Link Systems Inc.	EX220(US1) V1.0	Affected: 0 , < 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n (custom)
TP-Link Systems Inc.	EX222(EU1) V1.0	Affected: 0 , < 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n (custom)
TP-Link Systems Inc.	EX222(KR) V1.0	Affected: 0 , < 0.20.0 2.0.0 v609b.0 Build 260427 Rel.16915 (custom)
TP-Link Systems Inc.	EX222(US1) V1.0	Affected: 0 , < 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n (custom)
TP-Link Systems Inc.	EX511(BR) V2.0/2.8/2.9	Affected: 0 , < 0.9.0 3.0.0 v607e.0 Build 260520 Rel.33425n (custom)
TP-Link Systems Inc.	EX511(EU1) V2.0	Affected: 0 , < 0.9.0 3.0.0 v607e.0 Build 260520 Rel.33425n (custom)
TP-Link Systems Inc.	EX511(US1) V2.0	Affected: 0 , < 0.8.0 3.0.0 v607e.0 Build 260424 Rel.27419n (custom)
TP-Link Systems Inc.	EX520(US1) V1.0	Affected: 0 , < 0.7.0 3.0.0 v60b4.0 Build 251229 Rel.84306n (custom)
TP-Link Systems Inc.	EX520v(EU1)1.0	Affected: 0 , < 0.1.0 3.0.0 v60ee.0 Build 250310 Rel.55637n (custom)
TP-Link Systems Inc.	EX521(US1) V1.0	Affected: 0 , < 0.3.0 3.0.0 v60e3.0 Build 250925 Rel.66797n (custom)
TP-Link Systems Inc.	EX820v(EU1) V1.0	Affected: 0 , < 0.4.0 3.1.9 v6087.0 Build 250928 Rel.59674n (custom)
TP-Link Systems Inc.	EX920(US2) V1.6/V1.0	Affected: 0 , < 0.8.0 3.2.2 v6080.0 Build 260309 Rel.54790n (custom)
TP-Link Systems Inc.	XC220-G3v(EU1) V2.30	Affected: 0 , < 1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n (custom)
TP-Link Systems Inc.	XC220-G3v(US1) V2.30	Affected: 0 , < 1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n (custom)
TP-Link Systems Inc.	XX530v(BR)v1.0	Affected: 0 , < 0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n (custom)
TP-Link Systems Inc.	XX530v(BR)v2.0	Affected: 0 , < 0.4.0 3.1.10 v60dc.0 Build 250520 Rel.69748n (custom)
TP-Link Systems Inc.	XX530v(US1)	Affected: 0 , < 0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n (custom)
TP-Link Systems Inc.	XX530v(EU1)	Affected: 0 , < 0.3.0 3.1.10 v6107.0 Build 250425 Rel.71973n (custom)
TP-Link Systems Inc.	XX230v(BR) V1.0	Affected: 0 , < 0.16.0 3.0.0 v6066.0 Build 250423 Rel.43799n (custom)
TP-Link Systems Inc.	VX800v(DE) V1.0	Affected: 0 , < 800.0.16 (custom)
TP-Link Systems Inc.	VX1800v(EU1) V1.0	Affected: 0 , < 0.14.0 2.0.0 v6092.0 Build 250417 Rel.24761n (custom)
TP-Link Systems Inc.	VX420-G2h(AU) V3.0	Affected: 0 , < 0.2.0 2.0.0 v60df.0 Build 250427 Rel.38233n (custom)

Credits

Gerhard Hechenberger, Stefan Schweighofer, Constantin Schieber-Knoebl from the SEC Consult Vulnerability Lab

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "HB810(US2) V1.0/1.6/2.0/2.6",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HB810(EU1) V2.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HB710(US2) V1.6/1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HB710(EU1) 1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HB610(US2) V2.6/2.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HB610(EU1)",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HB610(CA) V2.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.6.0 3.0.0 v60af.0 Build 251216 Rel.46954n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HB410( EU1) 1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.3.0 3.0.0 v60bf.0 Build 250901 Rel.45574n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HB210(US2) 1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HB210(EU1) 1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HB210 Pro(EU1)1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.5.0 3.0.0 v60d5.0 Build 250922 Rel.13742n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HB210 Pro(US2)1.0/1.6",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.8.0 3.0.0 v60d5.0 Build 260318 Rel.78363n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HX510(US1) V2.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HX510(EU1) V2.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HX510(CA) V1.0/2.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HX510(AU) V1.0/2.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HX510(US2) 2.6",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.17.0 3.2.2 v6065.0 Build 260722 Rel.10662n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HX710(EU1) V1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.5.0 3.1.10 v6075.0 Build 260511 Rel.47847n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HX710 Pro(EU1) V1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.4.0 3.1.10 v6082.0 Build 260204 Rel.49460n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HX220(US1) V1.0/1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HX220(EU1) V1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HX220(CA) V1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HX220(AU) V1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HX141(EU1) V1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.2.0 3.1.0 v609d.0 Build 260128 Rel.29711n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HC220-G5(US1) V1.0/1.6",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.18.0 2.0.0 v605e.0 Build 250827 Rel.37904n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HC220-G5(EU1) V1.20/1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.18.0 2.0.0 v605e.0 Build 250827 Rel.37904n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HC220-G5(BR) V1.30",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.17.0 2.0.0 v605e.0 Build 250618 Rel.19329n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EB210 Pro(EU1) 1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EB210 Pro(US1) 1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EB810v(EU1) V1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.6.0 3.0.0 v608b.0 Build 250613 Rel.10497n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EX141(BR) V1.0/1.9",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.8.0 3.1.0 v608a.0 Build 250425 Rel.40905n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EX141(EU1) V1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.7.0 3.1.0 v608a.0 Build 250418 Rel.8257n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EX141(US1) V1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.7.0 3.1.0 v608a.0 Build 250418 Rel.8257n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EX220(BR) V1.0/1.20/1.28/1.29/1.8",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EX220(BR) V2.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EX220(EU1) V1.0/1.20",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EX220(RU) V1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EX220(US1) V1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EX222(EU1) V1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EX222(KR) V1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.20.0 2.0.0 v609b.0 Build 260427 Rel.16915",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EX222(US1) V1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EX511(BR) V2.0/2.8/2.9",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.9.0 3.0.0 v607e.0 Build 260520 Rel.33425n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EX511(EU1) V2.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.9.0 3.0.0 v607e.0 Build 260520 Rel.33425n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EX511(US1) V2.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.8.0 3.0.0 v607e.0 Build 260424 Rel.27419n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EX520(US1) V1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.7.0 3.0.0 v60b4.0 Build 251229 Rel.84306n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EX520v(EU1)1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.1.0 3.0.0 v60ee.0 Build 250310 Rel.55637n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EX521(US1) V1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.3.0 3.0.0 v60e3.0 Build 250925 Rel.66797n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EX820v(EU1) V1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.4.0 3.1.9 v6087.0 Build 250928 Rel.59674n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EX920(US2) V1.6/V1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.8.0 3.2.2 v6080.0 Build 260309 Rel.54790n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "XC220-G3v(EU1) V2.30",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "XC220-G3v(US1) V2.30",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "XX530v(BR)v1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "XX530v(BR)v2.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.4.0 3.1.10 v60dc.0 Build 250520 Rel.69748n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "XX530v(US1)",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "XX530v(EU1)",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.3.0 3.1.10 v6107.0 Build 250425 Rel.71973n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "XX230v(BR) V1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.16.0 3.0.0 v6066.0 Build 250423 Rel.43799n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "VX800v(DE) V1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "800.0.16",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "VX1800v(EU1) V1.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.14.0 2.0.0 v6092.0 Build 250417 Rel.24761n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "VX420-G2h(AU) V3.0",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "0.2.0 2.0.0 v60df.0 Build 250427 Rel.38233n",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Gerhard Hechenberger, Stefan Schweighofer, Constantin Schieber-Knoebl from the SEC Consult Vulnerability Lab"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIn affected TP-Link Aginet devices, i\u003cspan\u003ensufficient\nauthorization validation allows authenticated low-privileged users to execute higher-privileged\noperations.\u003c/span\u003e\u003c/p\u003e\n\n\u003cp\u003eAn attacker\nmay perform administrative actions such as creating privileged accounts or\nmodifying critical configuration settings.\u003c/p\u003e"
            }
          ],
          "value": "In affected TP-Link Aginet devices, insufficient\nauthorization validation allows authenticated low-privileged users to execute higher-privileged\noperations.\n\n\n\n\n\nAn attacker\nmay perform administrative actions such as creating privileged accounts or\nmodifying critical configuration settings."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233: Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "ADJACENT",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "CWE-863: Incorrect Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-10T22:24:20.322Z",
        "orgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
        "shortName": "TPLink"
      },
      "references": [
        {
          "name": "TP-Link Security Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.tp-link.com/us/support/faq/5239/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Privilege Escalation via Improper Authorization in User Management in multiple TP-Link Aginet Devices",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
    "assignerShortName": "TPLink",
    "cveId": "CVE-2025-30238",
    "datePublished": "2026-08-10T22:24:20.322Z",
    "dateReserved": "2025-03-19T11:09:33.244Z",
    "dateUpdated": "2026-08-10T22:24:20.322Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-30238\",\"sourceIdentifier\":\"f23511db-6c3e-4e32-a477-6aa17d310630\",\"published\":\"2026-08-10T23:16:49.900\",\"lastModified\":\"2026-08-10T23:16:49.900\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In affected TP-Link Aginet devices, insufficient\\nauthorization validation allows authenticated low-privileged users to execute higher-privileged\\noperations.\\n\\n\\n\\n\\n\\nAn attacker\\nmay perform administrative actions such as creating privileged accounts or\\nmodifying critical configuration settings.\"}],\"affected\":[{\"source\":\"f23511db-6c3e-4e32-a477-6aa17d310630\",\"affectedData\":[{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"HB810(US2) V1.0/1.6/2.0/2.6\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"HB810(EU1) V2.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"HB710(US2) V1.6/1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"HB710(EU1) 1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"HB610(US2) V2.6/2.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"HB610(EU1)\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"HB610(CA) V2.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.6.0 3.0.0 v60af.0 Build 251216 Rel.46954n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"HB410( EU1) 1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.3.0 3.0.0 v60bf.0 Build 250901 Rel.45574n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"HB210(US2) 1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"HB210(EU1) 1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"HB210 Pro(EU1)1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.5.0 3.0.0 v60d5.0 Build 250922 Rel.13742n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"HB210 Pro(US2)1.0/1.6\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.8.0 3.0.0 v60d5.0 Build 260318 Rel.78363n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"HX510(US1) V2.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"HX510(EU1) V2.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"HX510(CA) V1.0/2.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"HX510(AU) V1.0/2.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"HX510(US2) 2.6\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.17.0 3.2.2 v6065.0 Build 260722 Rel.10662n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"HX710(EU1) V1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.5.0 3.1.10 v6075.0 Build 260511 Rel.47847n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"HX710 Pro(EU1) V1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.4.0 3.1.10 v6082.0 Build 260204 Rel.49460n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"HX220(US1) V1.0/1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"HX220(EU1) V1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"HX220(CA) V1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"HX220(AU) V1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"HX141(EU1) V1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"1.2.0 3.1.0 v609d.0 Build 260128 Rel.29711n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"HC220-G5(US1) V1.0/1.6\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.18.0 2.0.0 v605e.0 Build 250827 Rel.37904n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"HC220-G5(EU1) V1.20/1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.18.0 2.0.0 v605e.0 Build 250827 Rel.37904n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"HC220-G5(BR) V1.30\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.17.0 2.0.0 v605e.0 Build 250618 Rel.19329n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"EB210 Pro(EU1) 1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"EB210 Pro(US1) 1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"EB810v(EU1) V1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.6.0 3.0.0 v608b.0 Build 250613 Rel.10497n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"EX141(BR) V1.0/1.9\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"1.8.0 3.1.0 v608a.0 Build 250425 Rel.40905n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"EX141(EU1) V1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"1.7.0 3.1.0 v608a.0 Build 250418 Rel.8257n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"EX141(US1) V1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"1.7.0 3.1.0 v608a.0 Build 250418 Rel.8257n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"EX220(BR) V1.0/1.20/1.28/1.29/1.8\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"EX220(BR) V2.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"EX220(EU1) V1.0/1.20\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"EX220(RU) V1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"EX220(US1) V1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"EX222(EU1) V1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"EX222(KR) V1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.20.0 2.0.0 v609b.0 Build 260427 Rel.16915\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"EX222(US1) V1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"EX511(BR) V2.0/2.8/2.9\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.9.0 3.0.0 v607e.0 Build 260520 Rel.33425n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"EX511(EU1) V2.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.9.0 3.0.0 v607e.0 Build 260520 Rel.33425n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"EX511(US1) V2.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.8.0 3.0.0 v607e.0 Build 260424 Rel.27419n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"EX520(US1) V1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.7.0 3.0.0 v60b4.0 Build 251229 Rel.84306n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"EX520v(EU1)1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.1.0 3.0.0 v60ee.0 Build 250310 Rel.55637n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"EX521(US1) V1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.3.0 3.0.0 v60e3.0 Build 250925 Rel.66797n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"EX820v(EU1) V1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.4.0 3.1.9 v6087.0 Build 250928 Rel.59674n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"EX920(US2) V1.6/V1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.8.0 3.2.2 v6080.0 Build 260309 Rel.54790n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"XC220-G3v(EU1) V2.30\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"XC220-G3v(US1) V2.30\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"XX530v(BR)v1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"XX530v(BR)v2.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.4.0 3.1.10 v60dc.0 Build 250520 Rel.69748n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"XX530v(US1)\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"XX530v(EU1)\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.3.0 3.1.10 v6107.0 Build 250425 Rel.71973n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"XX230v(BR) V1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.16.0 3.0.0 v6066.0 Build 250423 Rel.43799n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"VX800v(DE) V1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"800.0.16\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"VX1800v(EU1) V1.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.14.0 2.0.0 v6092.0 Build 250417 Rel.24761n\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TP-Link Systems Inc.\",\"product\":\"VX420-G2h(AU) V3.0\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.2.0 2.0.0 v60df.0 Build 250427 Rel.38233n\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"f23511db-6c3e-4e32-a477-6aa17d310630\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":8.6,\"baseSeverity\":\"HIGH\",\"attackVector\":\"ADJACENT\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}]},\"weaknesses\":[{\"source\":\"f23511db-6c3e-4e32-a477-6aa17d310630\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-863\"}]}],\"references\":[{\"url\":\"https://www.tp-link.com/us/support/faq/5239/\",\"source\":\"f23511db-6c3e-4e32-a477-6aa17d310630\"}]}}"
  }
}

GHSA-VHWM-F68V-4VG9

Vulnerability from github – Published: 2026-08-11 00:31 – Updated: 2026-08-11 00:31

Details

In affected TP-Link Aginet devices, insufficient authorization validation allows authenticated low-privileged users to execute higher-privileged operations.

An attacker may perform administrative actions such as creating privileged accounts or modifying critical configuration settings.

Severity

8.6 (High)


                  
                    CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-30238"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-863"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-08-10T23:16:49Z",
    "severity": "HIGH"
  },
  "details": "In affected TP-Link Aginet devices, insufficient\nauthorization validation allows authenticated low-privileged users to execute higher-privileged\noperations.\n\n\n\n\n\nAn attacker\nmay perform administrative actions such as creating privileged accounts or\nmodifying critical configuration settings.",
  "id": "GHSA-vhwm-f68v-4vg9",
  "modified": "2026-08-11T00:31:12Z",
  "published": "2026-08-11T00:31:12Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-30238"
    },
    {
      "type": "WEB",
      "url": "https://www.tp-link.com/us/support/faq/5239"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.

Action not permitted

CVE-2025-30238 (GCVE-0-2025-30238)

GHSA-VHWM-F68V-4VG9

Tags

Sightings

Nomenclature