CVE-2025-30237

Received Received - Intake

Authentication Bypass in TP-Link Aginet Devices

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: TPLink

Description

The affected TP-Link Aginet devices contain a flaw in the web management interface where authentication checks are not consistently enforced on certain endpoints. An attacker can send specially crafted requests to bypass authentication and directly invoke privileged functionality without valid credentials. This issue arises from improper enforcement of access control mechanisms on sensitive operations. Successful exploitation may allow an unauthenticated attacker to execute privileged operations and gain full control of the device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-10

Last Modified

2026-08-10

Generated

2026-08-11

AI Q&A

2026-08-11

EPSS Evaluated

N/A

NVD

CVE-2025-30237

EUVD

EUVD-2025-210673

Affected Vendors & Products

Vendor	Product	Version / Range
tp-link	aginet	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

This vulnerability is an authentication bypass flaw in TP-Link Aginet devices. The web management interface fails to consistently enforce authentication checks on certain endpoints. An attacker can send specially crafted requests to bypass authentication and directly invoke privileged functionality without valid credentials.

Impact Analysis

An unauthenticated attacker could exploit this to execute privileged operations and gain full control of the affected device. This may lead to unauthorized access, configuration changes, or disruption of network services.

Mitigation Strategies

Immediately update the TP-Link Aginet device firmware to the latest version provided by the vendor to address the authentication bypass flaw. Disable remote web management access if not required and restrict access to trusted networks only.

Hi! I’m here to help you understand CVE-2025-30237. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70