CVE-2025-30239
HighCVSS 8.5Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data may allow an attacker who has access to device storage to recover the keys and decrypt stored data. Successful exploitation may allow access to decrypted sensitive configuration data, including credentials and service-related information.
Risk Assessment
Risk of exposure of sensitive configuration data, including credentials, which may lead to unauthorized access to the device and associated services.
Recommendation
Update device firmware to eliminate the use of hardcoded keys. Restrict physical access to devices and protect storage from unauthorized access.
Original NVD description (English source)
In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data may allow an attacker who has access to device storage to recover the keys and decrypt stored data. Successful exploitation may allow access to decrypted sensitive configuration data, including credentials and service-related information.