Authentication Bypass via Broken Access Control in Web Server in Multiple TP-Link Aginet Devices
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-862.
Summary
The affected TP-Link Aginet devices contain a flaw in the web management interface where authentication checks are not consistently enforced on certain endpoints. An attacker can send specially crafted requests to bypass authentication and directly invoke privileged functionality without valid credentials. This issue arises from improper enforcement of access control mechanisms on sensitive operations. Successful exploitation may allow an unauthenticated attacker to execute privileged operations and gain full control of the device.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| TP-Link | HB810(US2) V1.0/1.6/2.0/2.6 | before 0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188n | 0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188n | Patch available | CNA |
| TP-Link | HB810(EU1) V2.0 | before 0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567n | 0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567n | Patch available | CNA |
| TP-Link | HB710(US2) V1.6/1.0 | before 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n | 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n | Patch available | CNA |
| TP-Link | HB710(EU1) 1.0 | before 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n | 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n | Patch available | CNA |
| TP-Link | HB610(US2) V2.6/2.0 | before 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n | 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n | Patch available | CNA |
| TP-Link | HB610(EU1) | before 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n | 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n | Patch available | CNA |
| TP-Link | HB610(CA) V2.0 | before 0.6.0 3.0.0 v60af.0 Build 251216 Rel.46954n | 0.6.0 3.0.0 v60af.0 Build 251216 Rel.46954n | Patch available | CNA |
| TP-Link | HB410( EU1) 1.0 | before 0.3.0 3.0.0 v60bf.0 Build 250901 Rel.45574n | 0.3.0 3.0.0 v60bf.0 Build 250901 Rel.45574n | Patch available | CNA |
| TP-Link | HB210(US2) 1.0 | before 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n | 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n | Patch available | CNA |
| TP-Link | HB210(EU1) 1.0 | before 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n | 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n | Patch available | CNA |
| TP-Link | HB210 Pro(EU1)1.0 | before 0.5.0 3.0.0 v60d5.0 Build 250922 Rel.13742n | 0.5.0 3.0.0 v60d5.0 Build 250922 Rel.13742n | Patch available | CNA |
| TP-Link | HB210 Pro(US2)1.0/1.6 | before 0.8.0 3.0.0 v60d5.0 Build 260318 Rel.78363n | 0.8.0 3.0.0 v60d5.0 Build 260318 Rel.78363n | Patch available | CNA |
| TP-Link | HX510(US1) V2.0 | before 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n | 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n | Patch available | CNA |
| TP-Link | HX510(EU1) V2.0 | before 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n | 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n | Patch available | CNA |
| TP-Link | HX510(CA) V1.0/2.0 | before 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n | 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n | Patch available | CNA |
| TP-Link | HX510(AU) V1.0/2.0 | before 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n | 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n | Patch available | CNA |
| TP-Link | HX510(US2) 2.6 | before 0.17.0 3.2.2 v6065.0 Build 260722 Rel.10662n | 0.17.0 3.2.2 v6065.0 Build 260722 Rel.10662n | Patch available | CNA |
| TP-Link | HX710(EU1) V1.0 | before 0.5.0 3.1.10 v6075.0 Build 260511 Rel.47847n | 0.5.0 3.1.10 v6075.0 Build 260511 Rel.47847n | Patch available | CNA |
| TP-Link | HX710 Pro(EU1) V1.0 | before 0.4.0 3.1.10 v6082.0 Build 260204 Rel.49460n | 0.4.0 3.1.10 v6082.0 Build 260204 Rel.49460n | Patch available | CNA |
| TP-Link | HX220(US1) V1.0/1.6 | before 0.18.0 2.0.0 v605f.0 Build 260304 Rel.45905n | 0.18.0 2.0.0 v605f.0 Build 260304 Rel.45905n | Patch available | CNA |
| TP-Link | HX220(EU1) V1.0 | before 0.18.0 2.0.0 v605f.0 Build 260304 Rel.45905n | 0.18.0 2.0.0 v605f.0 Build 260304 Rel.45905n | Patch available | CNA |
| TP-Link | HX220(CA) V1.0 | before 0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n | 0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n | Patch available | CNA |
| TP-Link | HX220(AU) V1.0 | before 0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n | 0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n | Patch available | CNA |
| TP-Link | HX141(EU1) V1.0 | before 1.2.0 3.1.0 v609d.0 Build 260128 Rel.29711n | 1.2.0 3.1.0 v609d.0 Build 260128 Rel.29711n | Patch available | CNA |
| TP-Link | HC220-G5(US1) V1.0/1.6 | before 0.18.0 2.0.0 v605e.0 Build 250827 Rel.37904n | 0.18.0 2.0.0 v605e.0 Build 250827 Rel.37904n | Patch available | CNA |
| TP-Link | HC220-G5(EU1) V1.20/1.0 | before 0.18.0 2.0.0 v605e.0 Build 250827 Rel.37904n | 0.18.0 2.0.0 v605e.0 Build 250827 Rel.37904n | Patch available | CNA |
| TP-Link | HC220-G5(BR) V1.30 | before 0.17.0 2.0.0 v605e.0 Build 250618 Rel.19329n | 0.17.0 2.0.0 v605e.0 Build 250618 Rel.19329n | Patch available | CNA |
| TP-Link | EX141(BR) V1.0/1.9 | before 1.8.0 3.1.0 v608a.0 Build 250425 Rel.40905n | 1.8.0 3.1.0 v608a.0 Build 250425 Rel.40905n | Patch available | CNA |
| TP-Link | EX141(EU1) V1.0 | before 1.7.0 3.1.0 v608a.0 Build 250418 Rel.8257n | 1.7.0 3.1.0 v608a.0 Build 250418 Rel.8257n | Patch available | CNA |
| TP-Link | EX141(US1) V1.0 | before 1.7.0 3.1.0 v608a.0 Build 250418 Rel.8257n | 1.7.0 3.1.0 v608a.0 Build 250418 Rel.8257n | Patch available | CNA |
| TP-Link | EX220(BR) V1.0/1.20/1.28/1.29/1.8 | before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n | 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n | Patch available | CNA |
| TP-Link | EX220(BR) V2.0 | before 0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732n | 0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732n | Patch available | CNA |
| TP-Link | EX220(EU1) V1.0/1.20 | before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n | 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n | Patch available | CNA |
| TP-Link | EX220(RU) V1.0 | before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n | 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n | Patch available | CNA |
| TP-Link | EX220(US1) V1.0 | before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n | 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n | Patch available | CNA |
| TP-Link | EX222(EU1) V1.0 | before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n | 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n | Patch available | CNA |
| TP-Link | EX222(KR) V1.0 | before 0.20.0 2.0.0 v609b.0 Build 260427 Rel.16915 | 0.20.0 2.0.0 v609b.0 Build 260427 Rel.16915 | Patch available | CNA |
| TP-Link | EX222(US1) V1.0 | before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n | 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n | Patch available | CNA |
| TP-Link | EX511(BR) V2.0/2.8/2.9 | before 0.9.0 3.0.0 v607e.0 Build 260520 Rel.33425n | 0.9.0 3.0.0 v607e.0 Build 260520 Rel.33425n | Patch available | CNA |
| TP-Link | EX511(EU1) V2.0 | before 0.9.0 3.0.0 v607e.0 Build 260520 Rel.33425n | 0.9.0 3.0.0 v607e.0 Build 260520 Rel.33425n | Patch available | CNA |
| TP-Link | EX511(US1) V2.0 | before 0.8.0 3.0.0 v607e.0 Build 260424 Rel.27419n | 0.8.0 3.0.0 v607e.0 Build 260424 Rel.27419n | Patch available | CNA |
| TP-Link | EX520(US1) V1.0 | before 0.7.0 3.0.0 v60b4.0 Build 251229 Rel.84306n | 0.7.0 3.0.0 v60b4.0 Build 251229 Rel.84306n | Patch available | CNA |
| TP-Link | EX520v(EU1)1.0 | before 0.1.0 3.0.0 v60ee.0 Build 250310 Rel.55637n | 0.1.0 3.0.0 v60ee.0 Build 250310 Rel.55637n | Patch available | CNA |
| TP-Link | EX521(US1) V1.0 | before 0.3.0 3.0.0 v60e3.0 Build 250925 Rel.66797n | 0.3.0 3.0.0 v60e3.0 Build 250925 Rel.66797n | Patch available | CNA |
| TP-Link | EX820v(EU1) V1.0 | before 0.4.0 3.1.9 v6087.0 Build 250928 Rel.59674n | 0.4.0 3.1.9 v6087.0 Build 250928 Rel.59674n | Patch available | CNA |
| TP-Link | EX920(US2) V1.6/V1.0 | before 0.8.0 3.2.2 v6080.0 Build 260309 Rel.54790n | 0.8.0 3.2.2 v6080.0 Build 260309 Rel.54790n | Patch available | CNA |
| TP-Link | XC220-G3v(EU1) V2.30 | before 1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n | 1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n | Patch available | CNA |
| TP-Link | XC220-G3v(US1) V2.30 | before 1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n | 1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n | Patch available | CNA |
| TP-Link | XX530v(BR)v1.0 | before 0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n | 0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n | Patch available | CNA |
| TP-Link | XX530v(BR)v2.0 | before 0.4.0 3.1.10 v60dc.0 Build 250520 Rel.69748n | 0.4.0 3.1.10 v60dc.0 Build 250520 Rel.69748n | Patch available | CNA |
| TP-Link | XX530v(US1) | before 0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n | 0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n | Patch available | CNA |
| TP-Link | XX530v(EU1) | before 0.3.0 3.1.10 v6107.0 Build 250425 Rel.71973n | 0.3.0 3.1.10 v6107.0 Build 250425 Rel.71973n | Patch available | CNA |
| TP-Link | XX230v(BR) V1.0 | before 0.16.0 3.0.0 v6066.0 Build 250423 Rel.43799n | 0.16.0 3.0.0 v6066.0 Build 250423 Rel.43799n | Patch available | CNA |
| TP-Link | VX800v(DE) V1.0 | before 800.0.16 | 800.0.16 | Patch available | CNA |
| TP-Link | VX1800v(EU1) V1.0 | before 0.14.0 2.0.0 v6092.0 Build 250417 Rel.24761n | 0.14.0 2.0.0 v6092.0 Build 250417 Rel.24761n | Patch available | CNA |
| TP-Link | VX420-G2h(AU) V3.0 | before 0.2.0 2.0.0 v60df.0 Build 250427 Rel.38233n | 0.2.0 2.0.0 v60df.0 Build 250427 Rel.38233n | Patch available | CNA |
- HB810(US2) V1.0/1.6/2.0/2.6 VendorTP-Link Affected before 0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188n Fixed in 0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188n Patch available CNA
- HB810(EU1) V2.0 VendorTP-Link Affected before 0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567n Fixed in 0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567n Patch available CNA
- HB710(US2) V1.6/1.0 VendorTP-Link Affected before 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n Fixed in 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n Patch available CNA
- HB710(EU1) 1.0 VendorTP-Link Affected before 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n Fixed in 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n Patch available CNA
- HB610(US2) V2.6/2.0 VendorTP-Link Affected before 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n Fixed in 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n Patch available CNA
- HB610(EU1) VendorTP-Link Affected before 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n Fixed in 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n Patch available CNA
- HB610(CA) V2.0 VendorTP-Link Affected before 0.6.0 3.0.0 v60af.0 Build 251216 Rel.46954n Fixed in 0.6.0 3.0.0 v60af.0 Build 251216 Rel.46954n Patch available CNA
- HB410( EU1) 1.0 VendorTP-Link Affected before 0.3.0 3.0.0 v60bf.0 Build 250901 Rel.45574n Fixed in 0.3.0 3.0.0 v60bf.0 Build 250901 Rel.45574n Patch available CNA
- HB210(US2) 1.0 VendorTP-Link Affected before 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n Fixed in 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n Patch available CNA
- HB210(EU1) 1.0 VendorTP-Link Affected before 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n Fixed in 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n Patch available CNA
- HB210 Pro(EU1)1.0 VendorTP-Link Affected before 0.5.0 3.0.0 v60d5.0 Build 250922 Rel.13742n Fixed in 0.5.0 3.0.0 v60d5.0 Build 250922 Rel.13742n Patch available CNA
- HB210 Pro(US2)1.0/1.6 VendorTP-Link Affected before 0.8.0 3.0.0 v60d5.0 Build 260318 Rel.78363n Fixed in 0.8.0 3.0.0 v60d5.0 Build 260318 Rel.78363n Patch available CNA
- HX510(US1) V2.0 VendorTP-Link Affected before 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n Fixed in 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n Patch available CNA
- HX510(EU1) V2.0 VendorTP-Link Affected before 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n Fixed in 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n Patch available CNA
- HX510(CA) V1.0/2.0 VendorTP-Link Affected before 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n Fixed in 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n Patch available CNA
- HX510(AU) V1.0/2.0 VendorTP-Link Affected before 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n Fixed in 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n Patch available CNA
- HX510(US2) 2.6 VendorTP-Link Affected before 0.17.0 3.2.2 v6065.0 Build 260722 Rel.10662n Fixed in 0.17.0 3.2.2 v6065.0 Build 260722 Rel.10662n Patch available CNA
- HX710(EU1) V1.0 VendorTP-Link Affected before 0.5.0 3.1.10 v6075.0 Build 260511 Rel.47847n Fixed in 0.5.0 3.1.10 v6075.0 Build 260511 Rel.47847n Patch available CNA
- HX710 Pro(EU1) V1.0 VendorTP-Link Affected before 0.4.0 3.1.10 v6082.0 Build 260204 Rel.49460n Fixed in 0.4.0 3.1.10 v6082.0 Build 260204 Rel.49460n Patch available CNA
- HX220(US1) V1.0/1.6 VendorTP-Link Affected before 0.18.0 2.0.0 v605f.0 Build 260304 Rel.45905n Fixed in 0.18.0 2.0.0 v605f.0 Build 260304 Rel.45905n Patch available CNA
- HX220(EU1) V1.0 VendorTP-Link Affected before 0.18.0 2.0.0 v605f.0 Build 260304 Rel.45905n Fixed in 0.18.0 2.0.0 v605f.0 Build 260304 Rel.45905n Patch available CNA
- HX220(CA) V1.0 VendorTP-Link Affected before 0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n Fixed in 0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n Patch available CNA
- HX220(AU) V1.0 VendorTP-Link Affected before 0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n Fixed in 0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n Patch available CNA
- HX141(EU1) V1.0 VendorTP-Link Affected before 1.2.0 3.1.0 v609d.0 Build 260128 Rel.29711n Fixed in 1.2.0 3.1.0 v609d.0 Build 260128 Rel.29711n Patch available CNA
- HC220-G5(US1) V1.0/1.6 VendorTP-Link Affected before 0.18.0 2.0.0 v605e.0 Build 250827 Rel.37904n Fixed in 0.18.0 2.0.0 v605e.0 Build 250827 Rel.37904n Patch available CNA
- HC220-G5(EU1) V1.20/1.0 VendorTP-Link Affected before 0.18.0 2.0.0 v605e.0 Build 250827 Rel.37904n Fixed in 0.18.0 2.0.0 v605e.0 Build 250827 Rel.37904n Patch available CNA
- HC220-G5(BR) V1.30 VendorTP-Link Affected before 0.17.0 2.0.0 v605e.0 Build 250618 Rel.19329n Fixed in 0.17.0 2.0.0 v605e.0 Build 250618 Rel.19329n Patch available CNA
- EX141(BR) V1.0/1.9 VendorTP-Link Affected before 1.8.0 3.1.0 v608a.0 Build 250425 Rel.40905n Fixed in 1.8.0 3.1.0 v608a.0 Build 250425 Rel.40905n Patch available CNA
- EX141(EU1) V1.0 VendorTP-Link Affected before 1.7.0 3.1.0 v608a.0 Build 250418 Rel.8257n Fixed in 1.7.0 3.1.0 v608a.0 Build 250418 Rel.8257n Patch available CNA
- EX141(US1) V1.0 VendorTP-Link Affected before 1.7.0 3.1.0 v608a.0 Build 250418 Rel.8257n Fixed in 1.7.0 3.1.0 v608a.0 Build 250418 Rel.8257n Patch available CNA
- EX220(BR) V1.0/1.20/1.28/1.29/1.8 VendorTP-Link Affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n Fixed in 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n Patch available CNA
- EX220(BR) V2.0 VendorTP-Link Affected before 0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732n Fixed in 0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732n Patch available CNA
- EX220(EU1) V1.0/1.20 VendorTP-Link Affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n Fixed in 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n Patch available CNA
- EX220(RU) V1.0 VendorTP-Link Affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n Fixed in 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n Patch available CNA
- EX220(US1) V1.0 VendorTP-Link Affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n Fixed in 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n Patch available CNA
- EX222(EU1) V1.0 VendorTP-Link Affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n Fixed in 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n Patch available CNA
- EX222(KR) V1.0 VendorTP-Link Affected before 0.20.0 2.0.0 v609b.0 Build 260427 Rel.16915 Fixed in 0.20.0 2.0.0 v609b.0 Build 260427 Rel.16915 Patch available CNA
- EX222(US1) V1.0 VendorTP-Link Affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n Fixed in 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n Patch available CNA
- EX511(BR) V2.0/2.8/2.9 VendorTP-Link Affected before 0.9.0 3.0.0 v607e.0 Build 260520 Rel.33425n Fixed in 0.9.0 3.0.0 v607e.0 Build 260520 Rel.33425n Patch available CNA
- EX511(EU1) V2.0 VendorTP-Link Affected before 0.9.0 3.0.0 v607e.0 Build 260520 Rel.33425n Fixed in 0.9.0 3.0.0 v607e.0 Build 260520 Rel.33425n Patch available CNA
- EX511(US1) V2.0 VendorTP-Link Affected before 0.8.0 3.0.0 v607e.0 Build 260424 Rel.27419n Fixed in 0.8.0 3.0.0 v607e.0 Build 260424 Rel.27419n Patch available CNA
- EX520(US1) V1.0 VendorTP-Link Affected before 0.7.0 3.0.0 v60b4.0 Build 251229 Rel.84306n Fixed in 0.7.0 3.0.0 v60b4.0 Build 251229 Rel.84306n Patch available CNA
- EX520v(EU1)1.0 VendorTP-Link Affected before 0.1.0 3.0.0 v60ee.0 Build 250310 Rel.55637n Fixed in 0.1.0 3.0.0 v60ee.0 Build 250310 Rel.55637n Patch available CNA
- EX521(US1) V1.0 VendorTP-Link Affected before 0.3.0 3.0.0 v60e3.0 Build 250925 Rel.66797n Fixed in 0.3.0 3.0.0 v60e3.0 Build 250925 Rel.66797n Patch available CNA
- EX820v(EU1) V1.0 VendorTP-Link Affected before 0.4.0 3.1.9 v6087.0 Build 250928 Rel.59674n Fixed in 0.4.0 3.1.9 v6087.0 Build 250928 Rel.59674n Patch available CNA
- EX920(US2) V1.6/V1.0 VendorTP-Link Affected before 0.8.0 3.2.2 v6080.0 Build 260309 Rel.54790n Fixed in 0.8.0 3.2.2 v6080.0 Build 260309 Rel.54790n Patch available CNA
- XC220-G3v(EU1) V2.30 VendorTP-Link Affected before 1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n Fixed in 1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n Patch available CNA
- XC220-G3v(US1) V2.30 VendorTP-Link Affected before 1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n Fixed in 1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n Patch available CNA
- XX530v(BR)v1.0 VendorTP-Link Affected before 0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n Fixed in 0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n Patch available CNA
- XX530v(BR)v2.0 VendorTP-Link Affected before 0.4.0 3.1.10 v60dc.0 Build 250520 Rel.69748n Fixed in 0.4.0 3.1.10 v60dc.0 Build 250520 Rel.69748n Patch available CNA
- XX530v(US1) VendorTP-Link Affected before 0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n Fixed in 0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n Patch available CNA
- XX530v(EU1) VendorTP-Link Affected before 0.3.0 3.1.10 v6107.0 Build 250425 Rel.71973n Fixed in 0.3.0 3.1.10 v6107.0 Build 250425 Rel.71973n Patch available CNA
- XX230v(BR) V1.0 VendorTP-Link Affected before 0.16.0 3.0.0 v6066.0 Build 250423 Rel.43799n Fixed in 0.16.0 3.0.0 v6066.0 Build 250423 Rel.43799n Patch available CNA
- VX800v(DE) V1.0 VendorTP-Link Affected before 800.0.16 Fixed in 800.0.16 Patch available CNA
- VX1800v(EU1) V1.0 VendorTP-Link Affected before 0.14.0 2.0.0 v6092.0 Build 250417 Rel.24761n Fixed in 0.14.0 2.0.0 v6092.0 Build 250417 Rel.24761n Patch available CNA
- VX420-G2h(AU) V3.0 VendorTP-Link Affected before 0.2.0 2.0.0 v60df.0 Build 250427 Rel.38233n Fixed in 0.2.0 2.0.0 v60df.0 Build 250427 Rel.38233n Patch available CNA
Remediation
- Fix · CNA HB810(US2) V1.0/1.6/2.0/2.6 (TP-Link Systems Inc.) Fixed in 0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188n
- Fix · CNA HB810(EU1) V2.0 (TP-Link Systems Inc.) Fixed in 0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567n
- Fix · CNA HB710(US2) V1.6/1.0 (TP-Link Systems Inc.) Fixed in 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n
- Fix · CNA HB710(EU1) 1.0 (TP-Link Systems Inc.) Fixed in 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n
- Fix · CNA HB610(US2) V2.6/2.0 (TP-Link Systems Inc.) Fixed in 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n
- Fix · CNA HB610(EU1) (TP-Link Systems Inc.) Fixed in 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n
- Fix · CNA HB610(CA) V2.0 (TP-Link Systems Inc.) Fixed in 0.6.0 3.0.0 v60af.0 Build 251216 Rel.46954n
- Fix · CNA HB410( EU1) 1.0 (TP-Link Systems Inc.) Fixed in 0.3.0 3.0.0 v60bf.0 Build 250901 Rel.45574n
- Fix · CNA HB210(US2) 1.0 (TP-Link Systems Inc.) Fixed in 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n
- Fix · CNA HB210(EU1) 1.0 (TP-Link Systems Inc.) Fixed in 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n
- Fix · CNA HB210 Pro(EU1)1.0 (TP-Link Systems Inc.) Fixed in 0.5.0 3.0.0 v60d5.0 Build 250922 Rel.13742n
- Fix · CNA HB210 Pro(US2)1.0/1.6 (TP-Link Systems Inc.) Fixed in 0.8.0 3.0.0 v60d5.0 Build 260318 Rel.78363n
- Fix · CNA HX510(US1) V2.0 (TP-Link Systems Inc.) Fixed in 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n
- Fix · CNA HX510(EU1) V2.0 (TP-Link Systems Inc.) Fixed in 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n
- Fix · CNA HX510(CA) V1.0/2.0 (TP-Link Systems Inc.) Fixed in 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n
- Fix · CNA HX510(AU) V1.0/2.0 (TP-Link Systems Inc.) Fixed in 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n
- Fix · CNA HX510(US2) 2.6 (TP-Link Systems Inc.) Fixed in 0.17.0 3.2.2 v6065.0 Build 260722 Rel.10662n
- Fix · CNA HX710(EU1) V1.0 (TP-Link Systems Inc.) Fixed in 0.5.0 3.1.10 v6075.0 Build 260511 Rel.47847n
- Fix · CNA HX710 Pro(EU1) V1.0 (TP-Link Systems Inc.) Fixed in 0.4.0 3.1.10 v6082.0 Build 260204 Rel.49460n
- Fix · CNA HX220(US1) V1.0/1.6 (TP-Link Systems Inc.) Fixed in 0.18.0 2.0.0 v605f.0 Build 260304 Rel.45905n
- Fix · CNA HX220(EU1) V1.0 (TP-Link Systems Inc.) Fixed in 0.18.0 2.0.0 v605f.0 Build 260304 Rel.45905n
- Fix · CNA HX220(CA) V1.0 (TP-Link Systems Inc.) Fixed in 0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n
- Fix · CNA HX220(AU) V1.0 (TP-Link Systems Inc.) Fixed in 0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n
- Fix · CNA HX141(EU1) V1.0 (TP-Link Systems Inc.) Fixed in 1.2.0 3.1.0 v609d.0 Build 260128 Rel.29711n
- Fix · CNA HC220-G5(US1) V1.0/1.6 (TP-Link Systems Inc.) Fixed in 0.18.0 2.0.0 v605e.0 Build 250827 Rel.37904n
- Fix · CNA HC220-G5(EU1) V1.20/1.0 (TP-Link Systems Inc.) Fixed in 0.18.0 2.0.0 v605e.0 Build 250827 Rel.37904n
- Fix · CNA HC220-G5(BR) V1.30 (TP-Link Systems Inc.) Fixed in 0.17.0 2.0.0 v605e.0 Build 250618 Rel.19329n
- Fix · CNA EX141(BR) V1.0/1.9 (TP-Link Systems Inc.) Fixed in 1.8.0 3.1.0 v608a.0 Build 250425 Rel.40905n
- Fix · CNA EX141(EU1) V1.0 (TP-Link Systems Inc.) Fixed in 1.7.0 3.1.0 v608a.0 Build 250418 Rel.8257n
- Fix · CNA EX141(US1) V1.0 (TP-Link Systems Inc.) Fixed in 1.7.0 3.1.0 v608a.0 Build 250418 Rel.8257n
- Fix · CNA EX220(BR) V1.0/1.20/1.28/1.29/1.8 (TP-Link Systems Inc.) Fixed in 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
- Fix · CNA EX220(BR) V2.0 (TP-Link Systems Inc.) Fixed in 0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732n
- Fix · CNA EX220(EU1) V1.0/1.20 (TP-Link Systems Inc.) Fixed in 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
- Fix · CNA EX220(RU) V1.0 (TP-Link Systems Inc.) Fixed in 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
- Fix · CNA EX220(US1) V1.0 (TP-Link Systems Inc.) Fixed in 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
- Fix · CNA EX222(EU1) V1.0 (TP-Link Systems Inc.) Fixed in 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
- Fix · CNA EX222(KR) V1.0 (TP-Link Systems Inc.) Fixed in 0.20.0 2.0.0 v609b.0 Build 260427 Rel.16915
- Fix · CNA EX222(US1) V1.0 (TP-Link Systems Inc.) Fixed in 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
- Fix · CNA EX511(BR) V2.0/2.8/2.9 (TP-Link Systems Inc.) Fixed in 0.9.0 3.0.0 v607e.0 Build 260520 Rel.33425n
- Fix · CNA EX511(EU1) V2.0 (TP-Link Systems Inc.) Fixed in 0.9.0 3.0.0 v607e.0 Build 260520 Rel.33425n
- Fix · CNA EX511(US1) V2.0 (TP-Link Systems Inc.) Fixed in 0.8.0 3.0.0 v607e.0 Build 260424 Rel.27419n
- Fix · CNA EX520(US1) V1.0 (TP-Link Systems Inc.) Fixed in 0.7.0 3.0.0 v60b4.0 Build 251229 Rel.84306n
- Fix · CNA EX520v(EU1)1.0 (TP-Link Systems Inc.) Fixed in 0.1.0 3.0.0 v60ee.0 Build 250310 Rel.55637n
- Fix · CNA EX521(US1) V1.0 (TP-Link Systems Inc.) Fixed in 0.3.0 3.0.0 v60e3.0 Build 250925 Rel.66797n
- Fix · CNA EX820v(EU1) V1.0 (TP-Link Systems Inc.) Fixed in 0.4.0 3.1.9 v6087.0 Build 250928 Rel.59674n
- Fix · CNA EX920(US2) V1.6/V1.0 (TP-Link Systems Inc.) Fixed in 0.8.0 3.2.2 v6080.0 Build 260309 Rel.54790n
- Fix · CNA XC220-G3v(EU1) V2.30 (TP-Link Systems Inc.) Fixed in 1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n
- Fix · CNA XC220-G3v(US1) V2.30 (TP-Link Systems Inc.) Fixed in 1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n
- Fix · CNA XX530v(BR)v1.0 (TP-Link Systems Inc.) Fixed in 0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n
- Fix · CNA XX530v(BR)v2.0 (TP-Link Systems Inc.) Fixed in 0.4.0 3.1.10 v60dc.0 Build 250520 Rel.69748n
- Fix · CNA XX530v(US1) (TP-Link Systems Inc.) Fixed in 0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n
- Fix · CNA XX530v(EU1) (TP-Link Systems Inc.) Fixed in 0.3.0 3.1.10 v6107.0 Build 250425 Rel.71973n
- Fix · CNA XX230v(BR) V1.0 (TP-Link Systems Inc.) Fixed in 0.16.0 3.0.0 v6066.0 Build 250423 Rel.43799n
- Fix · CNA VX800v(DE) V1.0 (TP-Link Systems Inc.) Fixed in 800.0.16
- Fix · CNA VX1800v(EU1) V1.0 (TP-Link Systems Inc.) Fixed in 0.14.0 2.0.0 v6092.0 Build 250417 Rel.24761n
- Fix · CNA VX420-G2h(AU) V3.0 (TP-Link Systems Inc.) Fixed in 0.2.0 2.0.0 v60df.0 Build 250427 Rel.38233n
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
TP-Link Systems EX141(BR) V1.0/1.9, EX141(EU1) V1.0 and 54 more products — tp-link.com/us/support/faq/5239
5 records Highest priority Priority MEDIUM 1 MEDIUM, 4 LOW
Other records, highest priority first
- TI-2025-21570 OS Command Injection in Web Interface in Multiple TP-Link Aginet DevicesPriority LOW 39
- TI-2025-21567 Privilege Escalation via Improper Authorization in User Management in multiple TP-Link Aginet DevicesPriority LOW 39
- TI-2025-21568 Sensitive Data Exposure due to Hardcoded Cryptographic Keys in Multiple TP-Link Aginet DevicesPriority LOW 38
Timeline
- 2026-10-02 Threatist record created from CVE-2025-30237
- 2026-10-03 Alias added: GHSA-gcr6-hgjr-2h8p
- 2026-10-10 Fix available: TP-Link Systems Inc./HX220(EU1) [email protected] 2.0.0 v605f.0 Build 260304 Rel.45905n, TP-Link Systems Inc./HX220(US1) V1.0/[email protected] 2.0.0 v605f.0 Build 260304 Rel.45905n · CNA
References
Advisory 1
More TP-Link vulnerabilities
- TI-2023-16571 TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain… KEVCVSS 3.1HIGH 8.8
- TI-2023-01313 Command injection in TP-Link Archer AX21 KEVCVSS 3.1HIGH 8.8
- TI-2020-14907 TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the… KEVCVSS 3.1HIGH 8.8
- TI-2025-08589 Authenticated RCE via Parental Control command injection KEVCVSS 4.0HIGH 8.6
- TI-2015-02672 Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317… KEVCVSS 3.1HIGH 7.5
- TI-2023-27456 Authentication bypass by spoofing in TP-Link TL-WR841N KEVCVSS 3.1MEDIUM 6.5
Sources
- CVE-2025-30237 · CVE Program
- CVE-2025-30237 · NVD
- FIRST EPSS
- GHSA-gcr6-hgjr-2h8p · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences