CVE-2025-30238

Received Received - Intake

Insufficient Authorization in TP-Link Aginet Devices

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: TPLink

Description

In affected TP-Link Aginet devices, insufficient authorization validation allows authenticated low-privileged users to execute higher-privileged operations. An attacker may perform administrative actions such as creating privileged accounts or modifying critical configuration settings.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-10

Last Modified

2026-08-10

Generated

2026-08-11

AI Q&A

2026-08-11

EPSS Evaluated

N/A

NVD

CVE-2025-30238

EUVD

EUVD-2025-210674

Affected Vendors & Products

Vendor	Product	Version / Range
tp-link	aginet	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

This vulnerability in TP-Link Aginet devices allows authenticated low-privileged users to perform administrative actions without proper authorization checks. Attackers could create privileged accounts or modify critical settings.

Impact Analysis

An attacker could gain control over the device, leading to unauthorized access, data breaches, or disruption of network services. This may affect personal or organizational security and privacy.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating compliance requirements for GDPR, HIPAA, and other regulations. Organizations may face legal penalties or reputational damage.

Mitigation Strategies

Update TP-Link Aginet devices to the latest firmware version to address insufficient authorization validation. Restrict low-privileged user access to administrative functions and monitor for unauthorized account creation or configuration changes.

Hi! I’m here to help you understand CVE-2025-30238. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70