CVE-2025-30240
Status: Awaiting AnalysisMedium (5.1)—
The affected TP-Link Aginet devices do not properly validate symbolic links created on external USB storage devices. By placing a crafted symbolic link on supported storage media, an attacker may cause the system to resolve the link.
Successful exploitation may allow unauthorized read access to sensitive files within the device filesystem.
CVSS
- Version: 4.0
- Vector: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Base score: 5.1
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 0.23%
- Percentile among all scored CVEs: 13
- Score date: 10/6/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
⚠ AI-inferred from the description — NVD hasn't analyzed this CVE yet, these aren't verified CPEs.
CWEs
- CWE-59
References
Raw JSON (NVD)
Show
{
"id": "CVE-2025-30240",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2025-30240",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2026-08-12T18:18:03.157977Z"
}
}
],
"cvssMetricV40": [
{
"type": "Secondary",
"source": "f23511db-6c3e-4e32-a477-6aa17d310630",
"cvssData": {
"Safety": "NOT_DEFINED",
"version": "4.0",
"Recovery": "NOT_DEFINED",
"baseScore": 5.1,
"Automatable": "NOT_DEFINED",
"attackVector": "PHYSICAL",
"baseSeverity": "MEDIUM",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"exploitMaturity": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"subIntegrityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"integrityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"availabilityRequirement": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"subConfidentialityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"confidentialityRequirement": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED"
}
}
]
},
"affected": [
{
"source": "f23511db-6c3e-4e32-a477-6aa17d310630",
"affectedData": [
{
"vendor": "TP-Link Systems Inc.",
"product": "HB810(US2) V1.0/1.6/2.0/2.6",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "HB810(EU1) V2.0",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "HB710(US2) V1.6/1.0",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "HB710(EU1) 1.0",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "HB610(US2) V2.6/2.0",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "HB610(EU1)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "HB610(CA) V2.0",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.6.0 3.0.0 v60af.0 Build 251216 Rel.46954n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "HB410( EU1) 1.0",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.3.0 3.0.0 v60bf.0 Build 250901 Rel.45574n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "HB210(US2) 1.0",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "HB210(EU1) 1.0",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "HB210 Pro(EU1)1.0",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.5.0 3.0.0 v60d5.0 Build 250922 Rel.13742n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "HB210 Pro(US2)1.0/1.6",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.8.0 3.0.0 v60d5.0 Build 260318 Rel.78363n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "EB810v(EU1) V1.0",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.6.0 3.0.0 v608b.0 Build 250613 Rel.10497n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "EX220(BR) V1.0/1.20/1.28/1.29/1.8",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "EX220(BR) V2.0",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "EX220(EU1) V1.0/1.20",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "EX220(RU) V1.0",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "EX220(US1) V1.0",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "EX222(EU1) V1.0",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "EX222(KR) V1.0",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.20.0 2.0.0 v609b.0 Build 260427 Rel.16915",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "EX222(US1) V1.0",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "EX520v(EU1)1.0",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.1.0 3.0.0 v60ee.0 Build 250310 Rel.55637n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "EX820v(EU1) V1.0",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.4.0 3.1.9 v6087.0 Build 250928 Rel.59674n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "EX920(US2) V1.6/V1.0",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.8.0 3.2.2 v6080.0 Build 260309 Rel.54790n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "XC220-G3v(EU1) V2.30",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "XC220-G3v(US1) V2.30",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "XX530v(BR)v1.0",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "XX530v(BR)v2.0",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.4.0 3.1.10 v60dc.0 Build 250520 Rel.69748n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "XX530v(US1)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "XX530v(EU1)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.3.0 3.1.10 v6107.0 Build 250425 Rel.71973n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "VX800v(DE) V1.0",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "800.0.16",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "VX1800v(EU1) V1.0",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.14.0 2.0.0 v6092.0 Build 250417 Rel.24761n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "VX420-G2h(AU) V3.0",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.2.0 2.0.0 v60df.0 Build 250427 Rel.38233n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2026-08-10T23:16:50.463",
"references": [
{
"url": "https://www.tp-link.com/us/support/faq/5239/",
"source": "f23511db-6c3e-4e32-a477-6aa17d310630"
}
],
"vulnStatus": "Awaiting Analysis",
"weaknesses": [
{
"type": "Secondary",
"source": "f23511db-6c3e-4e32-a477-6aa17d310630",
"description": [
{
"lang": "en",
"value": "CWE-59"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The affected TP-Link Aginet devices do not properly validate symbolic links created on external USB storage\ndevices. By placing a crafted symbolic link on supported storage media, an\nattacker may cause the system to resolve the link.\n\n\n\n\n\n\n\n\n\nSuccessful\nexploitation may allow unauthorized read access to sensitive files within the\ndevice filesystem."
},
{
"lang": "es",
"value": "Los dispositivos TP-Link Aginet afectados no validan correctamente los enlaces simbólicos creados en dispositivos de almacenamiento USB externos. Al colocar un enlace simbólico manipulado en medios de almacenamiento compatibles, un atacante puede hacer que el sistema resuelva el enlace.\n\nLa explotación exitosa puede permitir el acceso de lectura no autorizado a archivos sensibles dentro del sistema de archivos del dispositivo."
}
],
"lastModified": "2026-09-29T11:10:00.150",
"sourceIdentifier": "f23511db-6c3e-4e32-a477-6aa17d310630"
}