CVE-2025-30239
Sensitive Data Exposure due to Hardcoded Cryptographic Keys in Multiple TP-Link Aginet Devices
In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data may allow an attacker who has access to device storage to recover the keys and decrypt stored data.
Successful exploitation may allow access to decrypted sensitive configuration data, including credentials and service-related information.
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Sensitive Data Exposure due to Hardcoded Cryptographic Keys in Multiple TP-Link Aginet Devices
In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data may allow an attacker who has access to device storage to recover the keys and decrypt stored data.
Successful exploitation may allow access to decrypted sensitive configuration data, including credentials and service-related information.
- Record
CVE-2025-30239- CVSS 4.0
- 8.5 High
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N - Weakness
- CWE-321
- Updated
- 2026-11-02
EUVDEUVD-2025-210675
In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data may allow an attacker who has access to device storage to recover the keys and decrypt stored data.
Successful exploitation may allow access to decrypted sensitive configuration data, including credentials and service-related information.
- Record
EUVD-2025-210675- CVSS 4.0
- 8.5 High
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-9f5f-7wxj-73g8
In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware...
In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data may allow an attacker who has access to device storage to recover the keys and decrypt stored data.
Successful exploitation may allow access to decrypted sensitive configuration data, including credentials and service-related information.
- Record
GHSA-9f5f-7wxj-73g8- CVSS 4.0
- 8.5 High
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Weakness
- CWE-321
- Updated
- 2026-11-02
NVD
In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data may allow an attacker who has access to device storage to recover the keys and decrypt stored data.
Successful exploitation may allow access to decrypted sensitive configuration data, including credentials and service-related information.
- Record
CVE-2025-30239- CVSS 4.0
- 8.5 High
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Weakness
- CWE-321
- Updated
- 2026-11-02
Affected products
- tp-link systems inc. eb210 pro(eu1) 1.0
- tp-link systems inc. eb210 pro(us1) 1.0
- tp-link systems inc. eb810v(eu1) v1.0
- tp-link systems inc. ec220-g5(br) v3.0
- tp-link systems inc. ec220-g5(eu1) v3.0
- tp-link systems inc. ec220-g5(us1) v3.0
- tp-link systems inc. ec225-g5(br) v1.0
- tp-link systems inc. ec225-g5(eu1) v1.0
- tp-link systems inc. ec225-g5(us1) v1.0
- tp-link systems inc. ex141(br) v1.0/1.9
- tp-link systems inc. ex141(eu1) v1.0
- tp-link systems inc. ex141(us1) v1.0
Show 53 moreShow less
- tp-link systems inc. ex220(br) v1.0/1.20/1.28/1.29/1.8
- tp-link systems inc. ex220(br) v2.0
- tp-link systems inc. ex220(eu1) v1.0/1.20
- tp-link systems inc. ex220(ru) v1.0
- tp-link systems inc. ex220(us1) v1.0
- tp-link systems inc. ex222(eu1) v1.0
- tp-link systems inc. ex222(kr) v1.0
- tp-link systems inc. ex222(us1) v1.0
- tp-link systems inc. ex511(br) v2.0/2.8/2.9
- tp-link systems inc. ex511(eu1) v2.0
- tp-link systems inc. ex511(us1) v2.0
- tp-link systems inc. ex520(us1) v1.0
- tp-link systems inc. ex520v(eu1)1.0
- tp-link systems inc. ex521(us1) v1.0
- tp-link systems inc. ex820v(eu1) v1.0
- tp-link systems inc. ex920(us2) v1.6/v1.0
- tp-link systems inc. hb210 pro(eu1)1.0
- tp-link systems inc. hb210 pro(us2)1.0/1.6
- tp-link systems inc. hb210(eu1) 1.0
- tp-link systems inc. hb210(us2) 1.0
- tp-link systems inc. hb410( eu1) 1.0
- tp-link systems inc. hb610(ca) v2.0
- tp-link systems inc. hb610(eu1)
- tp-link systems inc. hb610(us2) v2.6/2.0
- tp-link systems inc. hb710(eu1) 1.0
- tp-link systems inc. hb710(us2) v1.6/1.0
- tp-link systems inc. hb810(eu1) v2.0
- tp-link systems inc. hb810(us2) v1.0/1.6/2.0/2.6
- tp-link systems inc. hc220-g5(br) v1.30
- tp-link systems inc. hc220-g5(eu1) v1.20/1.0
- tp-link systems inc. hc220-g5(us1) v1.0/1.6
- tp-link systems inc. hx141(eu1) v1.0
- tp-link systems inc. hx220(au) v1.0
- tp-link systems inc. hx220(ca) v1.0
- tp-link systems inc. hx220(eu1) v1.0
- tp-link systems inc. hx220(us1) v1.0/1.6
- tp-link systems inc. hx510(au) v1.0/2.0
- tp-link systems inc. hx510(ca) v1.0/2.0
- tp-link systems inc. hx510(eu1) v2.0
- tp-link systems inc. hx510(us1) v2.0
- tp-link systems inc. hx510(us2) 2.6
- tp-link systems inc. hx710 pro(eu1) v1.0
- tp-link systems inc. hx710(eu1) v1.0
- tp-link systems inc. vx1800v(eu1) v1.0
- tp-link systems inc. vx420-g2h(au) v3.0
- tp-link systems inc. vx800v(de) v1.0
- tp-link systems inc. xc220-g3v(eu1) v2.30
- tp-link systems inc. xc220-g3v(us1) v2.30
- tp-link systems inc. xx230v(br) v1.0
- tp-link systems inc. xx530v(br)v1.0
- tp-link systems inc. xx530v(br)v2.0
- tp-link systems inc. xx530v(eu1)
- tp-link systems inc. xx530v(us1)
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-30239 is a high vulnerability (CVSS 8.5) in Tp-link Systems Inc. Eb210 Pro(eu1) 1.0, published August 10, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.20%, the 9th percentile. No source names a fixed version.