CVE-2025-30238
HighCVSS 8.6Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
In affected TP-Link Aginet devices, insufficient authorization validation allows authenticated low-privileged users to execute higher-privileged operations. An attacker may perform administrative actions such as creating privileged accounts or modifying critical configuration settings.
Risk Assessment
Risk of privilege escalation, enabling unauthorized configuration changes and creation of administrative accounts, potentially leading to full device compromise.
Recommendation
Apply firmware updates that strengthen authorization controls. Regularly review user accounts and permissions.
Original NVD description (English source)
In affected TP-Link Aginet devices, insufficient authorization validation allows authenticated low-privileged users to execute higher-privileged operations. An attacker may perform administrative actions such as creating privileged accounts or modifying critical configuration settings.