Read the docs
TI-2025-21570 Aliases CVE-2025-30241GHSA-6v23-65fj-8g7c

OS Command Injection in Web Interface in Multiple TP-Link Aginet Devices

Priority LOW 39CWE-78Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-78.

Summary

Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input properly before passing it to system-level command execution functions.  An authenticated adjacent attacker may inject specially crafted input to execute arbitrary operation system commands with elevated privileges. Successful exploitation may allow execution of arbitrary system commands, potentially leading to full device compromise.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00409 35th percentileScored 2026-11-07
Fix Fixed HB810(US2) V1.0/1.6/2.0/2.6 (TP-Link Systems Inc.): 0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188nHB810(EU1) V2.0 (TP-Link Systems Inc.): 0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567n+29 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
TP-LinkHB810(US2) V1.0/1.6/2.0/2.6before 0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188n0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188nPatch availableCNA
TP-LinkHB810(EU1) V2.0before 0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567n0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567nPatch availableCNA
TP-LinkHB710(US2) V1.6/1.0before 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956nPatch availableCNA
TP-LinkHB710(EU1) 1.0before 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956nPatch availableCNA
TP-LinkHB610(US2) V2.6/2.0before 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362nPatch availableCNA
TP-LinkHB610(EU1)before 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362nPatch availableCNA
TP-LinkHB610(CA) V2.0before 0.6.0 3.0.0 v60af.0 Build 251216 Rel.46954n0.6.0 3.0.0 v60af.0 Build 251216 Rel.46954nPatch availableCNA
TP-LinkHB410( EU1) 1.0before 0.3.0 3.0.0 v60bf.0 Build 250901 Rel.45574n0.3.0 3.0.0 v60bf.0 Build 250901 Rel.45574nPatch availableCNA
TP-LinkHB210(US2) 1.0before 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715nPatch availableCNA
TP-LinkHB210(EU1) 1.0before 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715nPatch availableCNA
TP-LinkHB210 Pro(EU1)1.0before 0.5.0 3.0.0 v60d5.0 Build 250922 Rel.13742n0.5.0 3.0.0 v60d5.0 Build 250922 Rel.13742nPatch availableCNA
TP-LinkHB210 Pro(US2)1.0/1.6before 0.8.0 3.0.0 v60d5.0 Build 260318 Rel.78363n0.8.0 3.0.0 v60d5.0 Build 260318 Rel.78363nPatch availableCNA
TP-LinkEB210 Pro(EU1) 1.0before 0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901n0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901nPatch availableCNA
TP-LinkEB210 Pro(US1) 1.0before 0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901n0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901nPatch availableCNA
TP-LinkEB810v(EU1) V1.0before 0.6.0 3.0.0 v608b.0 Build 250613 Rel.10497n0.6.0 3.0.0 v608b.0 Build 250613 Rel.10497nPatch availableCNA
TP-LinkEX220(BR) V1.0/1.20/1.28/1.29/1.8before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728nPatch availableCNA
TP-LinkEX220(BR) V2.0before 0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732n0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732nPatch availableCNA
TP-LinkEX220(EU1) V1.0/1.20before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728nPatch availableCNA
TP-LinkEX220(RU) V1.0before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728nPatch availableCNA
TP-LinkEX220(US1) V1.0before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728nPatch availableCNA
TP-LinkEX222(EU1) V1.0before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728nPatch availableCNA
TP-LinkEX222(KR) V1.0before 0.20.0 2.0.0 v609b.0 Build 260427 Rel.169150.20.0 2.0.0 v609b.0 Build 260427 Rel.16915Patch availableCNA
TP-LinkEX222(US1) V1.0before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728nPatch availableCNA
TP-LinkEX520v(EU1)1.0before 0.1.0 3.0.0 v60ee.0 Build 250310 Rel.55637n0.1.0 3.0.0 v60ee.0 Build 250310 Rel.55637nPatch availableCNA
TP-LinkEX820v(EU1) V1.0before 0.4.0 3.1.9 v6087.0 Build 250928 Rel.59674n0.4.0 3.1.9 v6087.0 Build 250928 Rel.59674nPatch availableCNA
TP-LinkEX920(US2) V1.6/V1.0before 0.8.0 3.2.2 v6080.0 Build 260309 Rel.54790n0.8.0 3.2.2 v6080.0 Build 260309 Rel.54790nPatch availableCNA
TP-LinkXX530v(BR)v2.0before 0.4.0 3.1.10 v60dc.0 Build 250520 Rel.69748n0.4.0 3.1.10 v60dc.0 Build 250520 Rel.69748nPatch availableCNA
TP-LinkXX530v(EU1)before 0.3.0 3.1.10 v6107.0 Build 250425 Rel.71973n0.3.0 3.1.10 v6107.0 Build 250425 Rel.71973nPatch availableCNA
TP-LinkXX230v(BR) V1.0before 0.16.0 3.0.0 v6066.0 Build 250423 Rel.43799n0.16.0 3.0.0 v6066.0 Build 250423 Rel.43799nPatch availableCNA
TP-LinkVX800v(DE) V1.0before 800.0.16800.0.16Patch availableCNA
TP-LinkVX420-G2h(AU) V3.0before 0.2.0 2.0.0 v60df.0 Build 250427 Rel.38233n0.2.0 2.0.0 v60df.0 Build 250427 Rel.38233nPatch availableCNA
  • HB810(US2) V1.0/1.6/2.0/2.6 VendorTP-Link Affected before 0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188n Fixed in 0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188n Patch available CNA
  • HB810(EU1) V2.0 VendorTP-Link Affected before 0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567n Fixed in 0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567n Patch available CNA
  • HB710(US2) V1.6/1.0 VendorTP-Link Affected before 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n Fixed in 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n Patch available CNA
  • HB710(EU1) 1.0 VendorTP-Link Affected before 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n Fixed in 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n Patch available CNA
  • HB610(US2) V2.6/2.0 VendorTP-Link Affected before 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n Fixed in 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n Patch available CNA
  • HB610(EU1) VendorTP-Link Affected before 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n Fixed in 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n Patch available CNA
  • HB610(CA) V2.0 VendorTP-Link Affected before 0.6.0 3.0.0 v60af.0 Build 251216 Rel.46954n Fixed in 0.6.0 3.0.0 v60af.0 Build 251216 Rel.46954n Patch available CNA
  • HB410( EU1) 1.0 VendorTP-Link Affected before 0.3.0 3.0.0 v60bf.0 Build 250901 Rel.45574n Fixed in 0.3.0 3.0.0 v60bf.0 Build 250901 Rel.45574n Patch available CNA
  • HB210(US2) 1.0 VendorTP-Link Affected before 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n Fixed in 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n Patch available CNA
  • HB210(EU1) 1.0 VendorTP-Link Affected before 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n Fixed in 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n Patch available CNA
  • HB210 Pro(EU1)1.0 VendorTP-Link Affected before 0.5.0 3.0.0 v60d5.0 Build 250922 Rel.13742n Fixed in 0.5.0 3.0.0 v60d5.0 Build 250922 Rel.13742n Patch available CNA
  • HB210 Pro(US2)1.0/1.6 VendorTP-Link Affected before 0.8.0 3.0.0 v60d5.0 Build 260318 Rel.78363n Fixed in 0.8.0 3.0.0 v60d5.0 Build 260318 Rel.78363n Patch available CNA
  • EB210 Pro(EU1) 1.0 VendorTP-Link Affected before 0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901n Fixed in 0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901n Patch available CNA
  • EB210 Pro(US1) 1.0 VendorTP-Link Affected before 0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901n Fixed in 0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901n Patch available CNA
  • EB810v(EU1) V1.0 VendorTP-Link Affected before 0.6.0 3.0.0 v608b.0 Build 250613 Rel.10497n Fixed in 0.6.0 3.0.0 v608b.0 Build 250613 Rel.10497n Patch available CNA
  • EX220(BR) V1.0/1.20/1.28/1.29/1.8 VendorTP-Link Affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n Fixed in 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n Patch available CNA
  • EX220(BR) V2.0 VendorTP-Link Affected before 0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732n Fixed in 0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732n Patch available CNA
  • EX220(EU1) V1.0/1.20 VendorTP-Link Affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n Fixed in 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n Patch available CNA
  • EX220(RU) V1.0 VendorTP-Link Affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n Fixed in 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n Patch available CNA
  • EX220(US1) V1.0 VendorTP-Link Affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n Fixed in 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n Patch available CNA
  • EX222(EU1) V1.0 VendorTP-Link Affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n Fixed in 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n Patch available CNA
  • EX222(KR) V1.0 VendorTP-Link Affected before 0.20.0 2.0.0 v609b.0 Build 260427 Rel.16915 Fixed in 0.20.0 2.0.0 v609b.0 Build 260427 Rel.16915 Patch available CNA
  • EX222(US1) V1.0 VendorTP-Link Affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n Fixed in 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n Patch available CNA
  • EX520v(EU1)1.0 VendorTP-Link Affected before 0.1.0 3.0.0 v60ee.0 Build 250310 Rel.55637n Fixed in 0.1.0 3.0.0 v60ee.0 Build 250310 Rel.55637n Patch available CNA
  • EX820v(EU1) V1.0 VendorTP-Link Affected before 0.4.0 3.1.9 v6087.0 Build 250928 Rel.59674n Fixed in 0.4.0 3.1.9 v6087.0 Build 250928 Rel.59674n Patch available CNA
  • EX920(US2) V1.6/V1.0 VendorTP-Link Affected before 0.8.0 3.2.2 v6080.0 Build 260309 Rel.54790n Fixed in 0.8.0 3.2.2 v6080.0 Build 260309 Rel.54790n Patch available CNA
  • XX530v(BR)v2.0 VendorTP-Link Affected before 0.4.0 3.1.10 v60dc.0 Build 250520 Rel.69748n Fixed in 0.4.0 3.1.10 v60dc.0 Build 250520 Rel.69748n Patch available CNA
  • XX530v(EU1) VendorTP-Link Affected before 0.3.0 3.1.10 v6107.0 Build 250425 Rel.71973n Fixed in 0.3.0 3.1.10 v6107.0 Build 250425 Rel.71973n Patch available CNA
  • XX230v(BR) V1.0 VendorTP-Link Affected before 0.16.0 3.0.0 v6066.0 Build 250423 Rel.43799n Fixed in 0.16.0 3.0.0 v6066.0 Build 250423 Rel.43799n Patch available CNA
  • VX800v(DE) V1.0 VendorTP-Link Affected before 800.0.16 Fixed in 800.0.16 Patch available CNA
  • VX420-G2h(AU) V3.0 VendorTP-Link Affected before 0.2.0 2.0.0 v60df.0 Build 250427 Rel.38233n Fixed in 0.2.0 2.0.0 v60df.0 Build 250427 Rel.38233n Patch available CNA

Remediation

  • Fix · CNA HB810(US2) V1.0/1.6/2.0/2.6 (TP-Link Systems Inc.) Fixed in 0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188n
  • Fix · CNA HB810(EU1) V2.0 (TP-Link Systems Inc.) Fixed in 0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567n
  • Fix · CNA HB710(US2) V1.6/1.0 (TP-Link Systems Inc.) Fixed in 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n
  • Fix · CNA HB710(EU1) 1.0 (TP-Link Systems Inc.) Fixed in 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n
  • Fix · CNA HB610(US2) V2.6/2.0 (TP-Link Systems Inc.) Fixed in 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n
  • Fix · CNA HB610(EU1) (TP-Link Systems Inc.) Fixed in 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n
  • Fix · CNA HB610(CA) V2.0 (TP-Link Systems Inc.) Fixed in 0.6.0 3.0.0 v60af.0 Build 251216 Rel.46954n
  • Fix · CNA HB410( EU1) 1.0 (TP-Link Systems Inc.) Fixed in 0.3.0 3.0.0 v60bf.0 Build 250901 Rel.45574n
  • Fix · CNA HB210(US2) 1.0 (TP-Link Systems Inc.) Fixed in 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n
  • Fix · CNA HB210(EU1) 1.0 (TP-Link Systems Inc.) Fixed in 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n
  • Fix · CNA HB210 Pro(EU1)1.0 (TP-Link Systems Inc.) Fixed in 0.5.0 3.0.0 v60d5.0 Build 250922 Rel.13742n
  • Fix · CNA HB210 Pro(US2)1.0/1.6 (TP-Link Systems Inc.) Fixed in 0.8.0 3.0.0 v60d5.0 Build 260318 Rel.78363n
  • Fix · CNA EB210 Pro(EU1) 1.0 (TP-Link Systems Inc.) Fixed in 0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901n
  • Fix · CNA EB210 Pro(US1) 1.0 (TP-Link Systems Inc.) Fixed in 0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901n
  • Fix · CNA EB810v(EU1) V1.0 (TP-Link Systems Inc.) Fixed in 0.6.0 3.0.0 v608b.0 Build 250613 Rel.10497n
  • Fix · CNA EX220(BR) V1.0/1.20/1.28/1.29/1.8 (TP-Link Systems Inc.) Fixed in 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
  • Fix · CNA EX220(BR) V2.0 (TP-Link Systems Inc.) Fixed in 0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732n
  • Fix · CNA EX220(EU1) V1.0/1.20 (TP-Link Systems Inc.) Fixed in 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
  • Fix · CNA EX220(RU) V1.0 (TP-Link Systems Inc.) Fixed in 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
  • Fix · CNA EX220(US1) V1.0 (TP-Link Systems Inc.) Fixed in 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
  • Fix · CNA EX222(EU1) V1.0 (TP-Link Systems Inc.) Fixed in 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
  • Fix · CNA EX222(KR) V1.0 (TP-Link Systems Inc.) Fixed in 0.20.0 2.0.0 v609b.0 Build 260427 Rel.16915
  • Fix · CNA EX222(US1) V1.0 (TP-Link Systems Inc.) Fixed in 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
  • Fix · CNA EX520v(EU1)1.0 (TP-Link Systems Inc.) Fixed in 0.1.0 3.0.0 v60ee.0 Build 250310 Rel.55637n
  • Fix · CNA EX820v(EU1) V1.0 (TP-Link Systems Inc.) Fixed in 0.4.0 3.1.9 v6087.0 Build 250928 Rel.59674n
  • Fix · CNA EX920(US2) V1.6/V1.0 (TP-Link Systems Inc.) Fixed in 0.8.0 3.2.2 v6080.0 Build 260309 Rel.54790n
  • Fix · CNA XX530v(BR)v2.0 (TP-Link Systems Inc.) Fixed in 0.4.0 3.1.10 v60dc.0 Build 250520 Rel.69748n
  • Fix · CNA XX530v(EU1) (TP-Link Systems Inc.) Fixed in 0.3.0 3.1.10 v6107.0 Build 250425 Rel.71973n
  • Fix · CNA XX230v(BR) V1.0 (TP-Link Systems Inc.) Fixed in 0.16.0 3.0.0 v6066.0 Build 250423 Rel.43799n
  • Fix · CNA VX800v(DE) V1.0 (TP-Link Systems Inc.) Fixed in 800.0.16
  • Fix · CNA VX420-G2h(AU) V3.0 (TP-Link Systems Inc.) Fixed in 0.2.0 2.0.0 v60df.0 Build 250427 Rel.38233n

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    TP-Link Systems EB210 Pro(EU1) 1.0, EB210 Pro(US1) 1.0 and 29 more products — tp-link.com/us/support/faq/5239

    5 records Highest priority Priority MEDIUM 1 MEDIUM, 4 LOW

    Other records, highest priority first

    • TI-2025-21566 Authentication Bypass via Broken Access Control in Web Server in Multiple TP-Link Aginet DevicesPriority MEDIUM 40
    • TI-2025-21567 Privilege Escalation via Improper Authorization in User Management in multiple TP-Link Aginet DevicesPriority LOW 39
    • TI-2025-21568 Sensitive Data Exposure due to Hardcoded Cryptographic Keys in Multiple TP-Link Aginet DevicesPriority LOW 38
    Show all 5 records → Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-30241
  2. 2026-10-03 Alias added: GHSA-6v23-65fj-8g7c

References

Advisory 1

  • TI-2023-16571 TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain… KEVCVSS 3.1HIGH 8.8
  • TI-2023-01313 Command injection in TP-Link Archer AX21 KEVCVSS 3.1HIGH 8.8
  • TI-2020-14907 TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the… KEVCVSS 3.1HIGH 8.8
  • TI-2025-08589 Authenticated RCE via Parental Control command injection KEVCVSS 4.0HIGH 8.6
  • TI-2015-02672 Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317… KEVCVSS 3.1HIGH 7.5
  • TI-2023-27456 Authentication bypass by spoofing in TP-Link TL-WR841N KEVCVSS 3.1MEDIUM 6.5
See all 636 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences