CVE-2025-30241

Received Received - Intake

Command Injection in TP-Link Aginet Devices

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: TPLink

Description

Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input properly before passing it to system-level command execution functions. An authenticated adjacent attacker may inject specially crafted input to execute arbitrary operation system commands with elevated privileges. Successful exploitation may allow execution of arbitrary system commands, potentially leading to full device compromise.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-10

Last Modified

2026-08-10

Generated

2026-08-11

AI Q&A

2026-08-11

EPSS Evaluated

N/A

NVD

CVE-2025-30241

EUVD

EUVD-2025-210677

Affected Vendors & Products

Vendor	Product	Version / Range
tp-link	aginet	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This vulnerability exists in certain TP-Link Aginet devices where web interface components fail to properly validate and sanitize user input before passing it to system-level command execution functions. An authenticated attacker on the same network can inject crafted input to execute arbitrary operating system commands with elevated privileges.

Impact Analysis

Successful exploitation may allow attackers to execute arbitrary system commands, potentially leading to full compromise of the affected device. This could result in unauthorized access, data theft, or disruption of network services.

Mitigation Strategies

Apply the latest firmware update from TP-Link to patch the affected web interface components. Disable remote access to the web interface if not required. Monitor network traffic for suspicious command execution attempts.

Hi! I’m here to help you understand CVE-2025-30241. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70