{"id":"CVE-2025-30237","aliases":["EUVD-2025-210673","GHSA-gcr6-hgjr-2h8p"],"status":"published","title":"Authentication Bypass via Broken Access Control in Web Server in Multiple TP-Link Aginet Devices","description":"The affected TP-Link Aginet devices contain a flaw in the web management interface where authentication\nchecks are not consistently enforced on certain endpoints. An attacker can send\nspecially crafted requests to bypass authentication and directly invoke\nprivileged functionality without valid credentials. This issue arises from\nimproper enforcement of access control mechanisms on sensitive operations.\n\n\n\n\n\nSuccessful\nexploitation may allow an unauthenticated attacker to execute privileged\noperations and gain full control of the device.","severity":{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00331,"percentile":0.26511,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-862"],"published":"2026-08-10T22:23:41Z","modified":"2026-10-09T17:16:40Z","products":[{"vendor":"tp-link systems inc.","product":"ex141(br) v1.0/1.9"},{"vendor":"tp-link systems inc.","product":"ex141(eu1) v1.0"},{"vendor":"tp-link systems inc.","product":"ex141(us1) v1.0"},{"vendor":"tp-link systems inc.","product":"ex220(br) v1.0/1.20/1.28/1.29/1.8"},{"vendor":"tp-link systems inc.","product":"ex220(br) v2.0"},{"vendor":"tp-link systems inc.","product":"ex220(eu1) v1.0/1.20"},{"vendor":"tp-link systems inc.","product":"ex220(ru) v1.0"},{"vendor":"tp-link systems inc.","product":"ex220(us1) v1.0"},{"vendor":"tp-link systems inc.","product":"ex222(eu1) v1.0"},{"vendor":"tp-link systems inc.","product":"ex222(kr) v1.0"},{"vendor":"tp-link systems inc.","product":"ex222(us1) v1.0"},{"vendor":"tp-link systems inc.","product":"ex511(br) v2.0/2.8/2.9"},{"vendor":"tp-link systems inc.","product":"ex511(eu1) v2.0"},{"vendor":"tp-link systems inc.","product":"ex511(us1) v2.0"},{"vendor":"tp-link systems inc.","product":"ex520(us1) v1.0"},{"vendor":"tp-link systems inc.","product":"ex520v(eu1)1.0"},{"vendor":"tp-link systems inc.","product":"ex521(us1) v1.0"},{"vendor":"tp-link systems inc.","product":"ex820v(eu1) v1.0"},{"vendor":"tp-link systems inc.","product":"ex920(us2) v1.6/v1.0"},{"vendor":"tp-link systems inc.","product":"hb210 pro(eu1)1.0"},{"vendor":"tp-link systems inc.","product":"hb210 pro(us2)1.0/1.6"},{"vendor":"tp-link systems inc.","product":"hb210(eu1) 1.0"},{"vendor":"tp-link systems inc.","product":"hb210(us2) 1.0"},{"vendor":"tp-link systems inc.","product":"hb410( eu1) 1.0"},{"vendor":"tp-link systems inc.","product":"hb610(ca) v2.0"},{"vendor":"tp-link systems inc.","product":"hb610(eu1)"},{"vendor":"tp-link systems inc.","product":"hb610(us2) v2.6/2.0"},{"vendor":"tp-link systems inc.","product":"hb710(eu1) 1.0"},{"vendor":"tp-link systems inc.","product":"hb710(us2) v1.6/1.0"},{"vendor":"tp-link systems inc.","product":"hb810(eu1) v2.0"},{"vendor":"tp-link systems inc.","product":"hb810(us2) v1.0/1.6/2.0/2.6"},{"vendor":"tp-link systems inc.","product":"hc220-g5(br) v1.30"},{"vendor":"tp-link systems inc.","product":"hc220-g5(eu1) v1.20/1.0"},{"vendor":"tp-link systems inc.","product":"hc220-g5(us1) v1.0/1.6"},{"vendor":"tp-link systems inc.","product":"hx141(eu1) v1.0"},{"vendor":"tp-link systems inc.","product":"hx220(au) v1.0"},{"vendor":"tp-link systems inc.","product":"hx220(ca) v1.0"},{"vendor":"tp-link systems inc.","product":"hx220(eu1) v1.0"},{"vendor":"tp-link systems inc.","product":"hx220(us1) v1.0/1.6"},{"vendor":"tp-link systems inc.","product":"hx510(au) v1.0/2.0"},{"vendor":"tp-link systems inc.","product":"hx510(ca) v1.0/2.0"},{"vendor":"tp-link systems inc.","product":"hx510(eu1) v2.0"},{"vendor":"tp-link systems inc.","product":"hx510(us1) v2.0"},{"vendor":"tp-link systems inc.","product":"hx510(us2) 2.6"},{"vendor":"tp-link systems inc.","product":"hx710 pro(eu1) v1.0"},{"vendor":"tp-link systems inc.","product":"hx710(eu1) v1.0"},{"vendor":"tp-link systems inc.","product":"vx1800v(eu1) v1.0"},{"vendor":"tp-link systems inc.","product":"vx420-g2h(au) v3.0"},{"vendor":"tp-link systems inc.","product":"vx800v(de) v1.0"},{"vendor":"tp-link systems inc.","product":"xc220-g3v(eu1) v2.30"},{"vendor":"tp-link systems inc.","product":"xc220-g3v(us1) v2.30"},{"vendor":"tp-link systems inc.","product":"xx230v(br) v1.0"},{"vendor":"tp-link systems inc.","product":"xx530v(br)v1.0"},{"vendor":"tp-link systems inc.","product":"xx530v(br)v2.0"},{"vendor":"tp-link systems inc.","product":"xx530v(eu1)"},{"vendor":"tp-link systems inc.","product":"xx530v(us1)"}],"references":[{"url":"https://www.tp-link.com/us/support/faq/5239/","tags":["vendor-advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-30237"},{"url":"https://www.tp-link.com/us/support/faq/5239"},{"url":"https://github.com/advisories/GHSA-gcr6-hgjr-2h8p"}],"sources":{"cve":[{"id":"CVE-2025-30237","title":"Authentication Bypass via Broken Access Control in Web Server in Multiple TP-Link Aginet Devices","description":"The affected TP-Link Aginet devices contain a flaw in the web management interface where authentication\nchecks are not consistently enforced on certain endpoints. An attacker can send\nspecially crafted requests to bypass authentication and directly invoke\nprivileged functionality without valid credentials. This issue arises from\nimproper enforcement of access control mechanisms on sensitive operations.\n\n\n\n\n\nSuccessful\nexploitation may allow an unauthenticated attacker to execute privileged\noperations and gain full control of the device.","status":"published","published":"2026-08-10T22:23:41.934Z","modified":"2026-10-09T16:51:40.569Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:32:35.099955Z"}],"euvd":[{"id":"EUVD-2025-210673","description":"The affected TP-Link Aginet devices contain a flaw in the web management interface where authentication\nchecks are not consistently enforced on certain endpoints. An attacker can send\nspecially crafted requests to bypass authentication and directly invoke\nprivileged functionality without valid credentials. This issue arises from\nimproper enforcement of access control mechanisms on sensitive operations.\n\n\n\n\n\nSuccessful\nexploitation may allow an unauthenticated attacker to execute privileged\noperations and gain full control of the device.","status":"published","published":"2026-08-10T22:23:41Z","modified":"2026-10-09T16:51:40Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T17:27:24.64208Z"}],"ghsa":[{"id":"GHSA-gcr6-hgjr-2h8p","title":"The affected TP-Link Aginet devices contain a flaw in the web management interface where...","description":"The affected TP-Link Aginet devices contain a flaw in the web management interface where authentication\nchecks are not consistently enforced on certain endpoints. An attacker can send\nspecially crafted requests to bypass authentication and directly invoke\nprivileged functionality without valid credentials. This issue arises from\nimproper enforcement of access control mechanisms on sensitive operations.\n\n\n\n\n\nSuccessful\nexploitation may allow an unauthenticated attacker to execute privileged\noperations and gain full control of the device.","status":"published","published":"2026-08-11T00:31:12Z","modified":"2026-08-11T00:31:18Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T15:10:16.495213Z"}],"nvd":[{"id":"CVE-2025-30237","description":"The affected TP-Link Aginet devices contain a flaw in the web management interface where authentication\nchecks are not consistently enforced on certain endpoints. An attacker can send\nspecially crafted requests to bypass authentication and directly invoke\nprivileged functionality without valid credentials. This issue arises from\nimproper enforcement of access control mechanisms on sensitive operations.\n\n\n\n\n\nSuccessful\nexploitation may allow an unauthenticated attacker to execute privileged\noperations and gain full control of the device.","status":"published","published":"2026-08-10T23:16:48.64Z","modified":"2026-10-09T17:16:40.23Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:12:03.20248Z"}]}}