CVE-2025-30240 (GCVE-0-2025-30240)
Vulnerability from cvelistv5
Published
2026-08-10 22:25
Modified
2026-08-12 18:18
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-59 - Improper Link Resolution Before File Access
Summary
The affected TP-Link Aginet devices do not properly validate symbolic links created on external USB storage
devices. By placing a crafted symbolic link on supported storage media, an
attacker may cause the system to resolve the link.
Successful
exploitation may allow unauthorized read access to sensitive files within the
device filesystem.
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
| Vendor | Product | Version | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| TP-Link Systems Inc. | HB810(US2) V1.0/1.6/2.0/2.6 |
Version: 0 < 0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188n |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-30240",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-12T18:18:03.157977Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-12T18:18:18.691Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "HB810(US2) V1.0/1.6/2.0/2.6",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HB810(EU1) V2.0",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HB710(US2) V1.6/1.0",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HB710(EU1) 1.0",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HB610(US2) V2.6/2.0",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HB610(EU1)",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HB610(CA) V2.0",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.6.0 3.0.0 v60af.0 Build 251216 Rel.46954n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HB410( EU1) 1.0",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.3.0 3.0.0 v60bf.0 Build 250901 Rel.45574n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HB210(US2) 1.0",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HB210(EU1) 1.0",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HB210 Pro(EU1)1.0",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.5.0 3.0.0 v60d5.0 Build 250922 Rel.13742n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HB210 Pro(US2)1.0/1.6",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.8.0 3.0.0 v60d5.0 Build 260318 Rel.78363n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "EB810v(EU1) V1.0",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.6.0 3.0.0 v608b.0 Build 250613 Rel.10497n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "EX220(BR) V1.0/1.20/1.28/1.29/1.8",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "EX220(BR) V2.0",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "EX220(EU1) V1.0/1.20",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "EX220(RU) V1.0",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "EX220(US1) V1.0",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "EX222(EU1) V1.0",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "EX222(KR) V1.0",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.20.0 2.0.0 v609b.0 Build 260427 Rel.16915",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "EX222(US1) V1.0",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "EX520v(EU1)1.0",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.1.0 3.0.0 v60ee.0 Build 250310 Rel.55637n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "EX820v(EU1) V1.0",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.4.0 3.1.9 v6087.0 Build 250928 Rel.59674n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "EX920(US2) V1.6/V1.0",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.8.0 3.2.2 v6080.0 Build 260309 Rel.54790n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "XC220-G3v(EU1) V2.30",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "XC220-G3v(US1) V2.30",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "XX530v(BR)v1.0",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "XX530v(BR)v2.0",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.4.0 3.1.10 v60dc.0 Build 250520 Rel.69748n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "XX530v(US1)",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "XX530v(EU1)",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.3.0 3.1.10 v6107.0 Build 250425 Rel.71973n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "VX800v(DE) V1.0",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "800.0.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "VX1800v(EU1) V1.0",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.14.0 2.0.0 v6092.0 Build 250417 Rel.24761n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "VX420-G2h(AU) V3.0",
"vendor": "TP-Link Systems Inc.",
"versions": [
{
"lessThan": "0.2.0 2.0.0 v60df.0 Build 250427 Rel.38233n",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Gerhard Hechenberger, Stefan Schweighofer, Constantin Schieber-Knoebl from the SEC Consult Vulnerability Lab"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eThe affected TP-Link Aginet devices do not properly validate symbolic links created on external USB storage\ndevices. By placing a crafted symbolic link on supported storage media, an\nattacker may cause the system to resolve the link.\u003c/p\u003e\u003cp\u003e\n\n\u003c/p\u003e\u003cp\u003eSuccessful\nexploitation may allow unauthorized read access to sensitive files within the\ndevice filesystem.\u003c/p\u003e"
}
],
"value": "The affected TP-Link Aginet devices do not properly validate symbolic links created on external USB storage\ndevices. By placing a crafted symbolic link on supported storage media, an\nattacker may cause the system to resolve the link.\n\n\n\n\n\n\n\n\n\nSuccessful\nexploitation may allow unauthorized read access to sensitive files within the\ndevice filesystem."
}
],
"impacts": [
{
"capecId": "CAPEC-132",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-132: Symlink Attack"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "PHYSICAL",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-59",
"description": "CWE-59: Improper Link Resolution Before File Access",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-10T22:25:41.776Z",
"orgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
"shortName": "TPLink"
},
"references": [
{
"name": "TP-Link Security Advisory",
"tags": [
"vendor-advisory"
],
"url": "https://www.tp-link.com/us/support/faq/5239/"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Arbitrary File Read via Improper Symlink Handling in USB HTTPS Access Path in multiple TP-Link Aginet Devices",
"x_generator": {
"engine": "Vulnogram 1.0.4"
}
}
},
"cveMetadata": {
"assignerOrgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
"assignerShortName": "TPLink",
"cveId": "CVE-2025-30240",
"datePublished": "2026-08-10T22:25:41.776Z",
"dateReserved": "2025-03-19T11:09:33.245Z",
"dateUpdated": "2026-08-12T18:18:18.691Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-30240\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-08-12T18:18:03.157977Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-08-12T18:18:12.564Z\"}}], \"cna\": {\"title\": \"Arbitrary File Read via Improper Symlink Handling in USB HTTPS Access Path in multiple TP-Link Aginet Devices\", \"source\": {\"discovery\": \"UNKNOWN\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Gerhard Hechenberger, Stefan Schweighofer, Constantin Schieber-Knoebl from the SEC Consult Vulnerability Lab\"}], \"impacts\": [{\"capecId\": \"CAPEC-132\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-132: Symlink Attack\"}]}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV4_0\": {\"Safety\": \"NOT_DEFINED\", \"version\": \"4.0\", \"Recovery\": \"NOT_DEFINED\", \"baseScore\": 5.1, \"Automatable\": \"NOT_DEFINED\", \"attackVector\": \"PHYSICAL\", \"baseSeverity\": \"MEDIUM\", \"valueDensity\": \"NOT_DEFINED\", \"vectorString\": \"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N\", \"exploitMaturity\": \"NOT_DEFINED\", \"providerUrgency\": \"NOT_DEFINED\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"privilegesRequired\": \"NONE\", \"subIntegrityImpact\": \"NONE\", \"vulnIntegrityImpact\": \"NONE\", \"subAvailabilityImpact\": \"NONE\", \"vulnAvailabilityImpact\": \"NONE\", \"subConfidentialityImpact\": \"NONE\", \"vulnConfidentialityImpact\": \"HIGH\", \"vulnerabilityResponseEffort\": \"NOT_DEFINED\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"HB810(US2) V1.0/1.6/2.0/2.6\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"HB810(EU1) V2.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"HB710(US2) V1.6/1.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"HB710(EU1) 1.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"HB610(US2) V2.6/2.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"HB610(EU1)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"HB610(CA) V2.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.6.0 3.0.0 v60af.0 Build 251216 Rel.46954n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"HB410( EU1) 1.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.3.0 3.0.0 v60bf.0 Build 250901 Rel.45574n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"HB210(US2) 1.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"HB210(EU1) 1.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"HB210 Pro(EU1)1.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.5.0 3.0.0 v60d5.0 Build 250922 Rel.13742n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"HB210 Pro(US2)1.0/1.6\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.8.0 3.0.0 v60d5.0 Build 260318 Rel.78363n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"EB810v(EU1) V1.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.6.0 3.0.0 v608b.0 Build 250613 Rel.10497n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"EX220(BR) V1.0/1.20/1.28/1.29/1.8\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"EX220(BR) V2.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"EX220(EU1) V1.0/1.20\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"EX220(RU) V1.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"EX220(US1) V1.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"EX222(EU1) V1.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"EX222(KR) V1.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.20.0 2.0.0 v609b.0 Build 260427 Rel.16915\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"EX222(US1) V1.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"EX520v(EU1)1.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.1.0 3.0.0 v60ee.0 Build 250310 Rel.55637n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"EX820v(EU1) V1.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.4.0 3.1.9 v6087.0 Build 250928 Rel.59674n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"EX920(US2) V1.6/V1.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.8.0 3.2.2 v6080.0 Build 260309 Rel.54790n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"XC220-G3v(EU1) V2.30\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"XC220-G3v(US1) V2.30\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"XX530v(BR)v1.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"XX530v(BR)v2.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.4.0 3.1.10 v60dc.0 Build 250520 Rel.69748n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"XX530v(US1)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"XX530v(EU1)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.3.0 3.1.10 v6107.0 Build 250425 Rel.71973n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"VX800v(DE) V1.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"800.0.16\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"VX1800v(EU1) V1.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.14.0 2.0.0 v6092.0 Build 250417 Rel.24761n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TP-Link Systems Inc.\", \"product\": \"VX420-G2h(AU) V3.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.2.0 2.0.0 v60df.0 Build 250427 Rel.38233n\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://www.tp-link.com/us/support/faq/5239/\", \"name\": \"TP-Link Security Advisory\", \"tags\": [\"vendor-advisory\"]}], \"x_generator\": {\"engine\": \"Vulnogram 1.0.4\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"The affected TP-Link Aginet devices do not properly validate symbolic links created on external USB storage\\ndevices. By placing a crafted symbolic link on supported storage media, an\\nattacker may cause the system to resolve the link.\\n\\n\\n\\n\\n\\n\\n\\n\\n\\nSuccessful\\nexploitation may allow unauthorized read access to sensitive files within the\\ndevice filesystem.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eThe affected TP-Link Aginet devices do not properly validate symbolic links created on external USB storage\\ndevices. By placing a crafted symbolic link on supported storage media, an\\nattacker may cause the system to resolve the link.\u003c/p\u003e\u003cp\u003e\\n\\n\u003c/p\u003e\u003cp\u003eSuccessful\\nexploitation may allow unauthorized read access to sensitive files within the\\ndevice filesystem.\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-59\", \"description\": \"CWE-59: Improper Link Resolution Before File Access\"}]}], \"providerMetadata\": {\"orgId\": \"f23511db-6c3e-4e32-a477-6aa17d310630\", \"shortName\": \"TPLink\", \"dateUpdated\": \"2026-08-10T22:25:41.776Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2025-30240\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-12T18:18:18.691Z\", \"dateReserved\": \"2025-03-19T11:09:33.245Z\", \"assignerOrgId\": \"f23511db-6c3e-4e32-a477-6aa17d310630\", \"datePublished\": \"2026-08-10T22:25:41.776Z\", \"assignerShortName\": \"TPLink\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…