CVE-2025-30240 - Vulnerability Details

- Arbitrary File Read via Improper Symlink Handling in USB HTTPS Access Path in multiple TP-Link Aginet Devices

Description

The affected TP-Link Aginet devices do not properly validate symbolic links created on external USB storage
devices. By placing a crafted symbolic link on supported storage media, an
attacker may cause the system to resolve the link.

Successful
exploitation may allow unauthorized read access to sensitive files within the
device filesystem.

Published: 2026-08-10

Score: 5.1 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

TP-Link Systems Inc.

HB810(US2) V1.0/1.6/2.0/2.6

unaffected

Version	Status	Constraints
`0`	affected	< 0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188n

TP-Link Systems Inc.

HB810(EU1) V2.0

unaffected

Version	Status	Constraints
`0`	affected	< 0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567n

TP-Link Systems Inc.

HB710(US2) V1.6/1.0

unaffected

Version	Status	Constraints
`0`	affected	< 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n

TP-Link Systems Inc.

HB710(EU1) 1.0

unaffected

Version	Status	Constraints
`0`	affected	< 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n

TP-Link Systems Inc.

HB610(US2) V2.6/2.0

unaffected

Version	Status	Constraints
`0`	affected	< 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n

TP-Link Systems Inc.

HB610(EU1)

unaffected

Version	Status	Constraints
`0`	affected	< 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n

TP-Link Systems Inc.

HB610(CA) V2.0

unaffected

Version	Status	Constraints
`0`	affected	< 0.6.0 3.0.0 v60af.0 Build 251216 Rel.46954n

TP-Link Systems Inc.

HB410( EU1) 1.0

unaffected

Version	Status	Constraints
`0`	affected	< 0.3.0 3.0.0 v60bf.0 Build 250901 Rel.45574n

TP-Link Systems Inc.

HB210(US2) 1.0

unaffected

Version	Status	Constraints
`0`	affected	< 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n

TP-Link Systems Inc.

HB210(EU1) 1.0

unaffected

Version	Status	Constraints
`0`	affected	< 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n

TP-Link Systems Inc.

HB210 Pro(EU1)1.0

unaffected

Version	Status	Constraints
`0`	affected	< 0.5.0 3.0.0 v60d5.0 Build 250922 Rel.13742n

TP-Link Systems Inc.

HB210 Pro(US2)1.0/1.6

unaffected

Version	Status	Constraints
`0`	affected	< 0.8.0 3.0.0 v60d5.0 Build 260318 Rel.78363n

TP-Link Systems Inc.

EB810v(EU1) V1.0

unaffected

Version	Status	Constraints
`0`	affected	< 0.6.0 3.0.0 v608b.0 Build 250613 Rel.10497n

TP-Link Systems Inc.

EX220(BR) V1.0/1.20/1.28/1.29/1.8

unaffected

Version	Status	Constraints
`0`	affected	< 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n

TP-Link Systems Inc.

EX220(BR) V2.0

unaffected

Version	Status	Constraints
`0`	affected	< 0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732n

TP-Link Systems Inc.

EX220(EU1) V1.0/1.20

unaffected

Version	Status	Constraints
`0`	affected	< 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n

TP-Link Systems Inc.

EX220(RU) V1.0

unaffected

Version	Status	Constraints
`0`	affected	< 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n

TP-Link Systems Inc.

EX220(US1) V1.0

unaffected

Version	Status	Constraints
`0`	affected	< 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n

TP-Link Systems Inc.

EX222(EU1) V1.0

unaffected

Version	Status	Constraints
`0`	affected	< 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n

TP-Link Systems Inc.

EX222(KR) V1.0

unaffected

Version	Status	Constraints
`0`	affected	< 0.20.0 2.0.0 v609b.0 Build 260427 Rel.16915

TP-Link Systems Inc.

EX222(US1) V1.0

unaffected

Version	Status	Constraints
`0`	affected	< 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n

TP-Link Systems Inc.

EX520v(EU1)1.0

unaffected

Version	Status	Constraints
`0`	affected	< 0.1.0 3.0.0 v60ee.0 Build 250310 Rel.55637n

TP-Link Systems Inc.

EX820v(EU1) V1.0

unaffected

Version	Status	Constraints
`0`	affected	< 0.4.0 3.1.9 v6087.0 Build 250928 Rel.59674n

TP-Link Systems Inc.

EX920(US2) V1.6/V1.0

unaffected

Version	Status	Constraints
`0`	affected	< 0.8.0 3.2.2 v6080.0 Build 260309 Rel.54790n

TP-Link Systems Inc.

XC220-G3v(EU1) V2.30

unaffected

Version	Status	Constraints
`0`	affected	< 1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n

TP-Link Systems Inc.

XC220-G3v(US1) V2.30

unaffected

Version	Status	Constraints
`0`	affected	< 1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n

TP-Link Systems Inc.

XX530v(BR)v1.0

unaffected

Version	Status	Constraints
`0`	affected	< 0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n

TP-Link Systems Inc.

XX530v(BR)v2.0

unaffected

Version	Status	Constraints
`0`	affected	< 0.4.0 3.1.10 v60dc.0 Build 250520 Rel.69748n

TP-Link Systems Inc.

XX530v(US1)

unaffected

Version	Status	Constraints
`0`	affected	< 0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n

TP-Link Systems Inc.

XX530v(EU1)

unaffected

Version	Status	Constraints
`0`	affected	< 0.3.0 3.1.10 v6107.0 Build 250425 Rel.71973n

TP-Link Systems Inc.

VX800v(DE) V1.0

unaffected

Version	Status	Constraints
`0`	affected	< 800.0.16

TP-Link Systems Inc.

VX1800v(EU1) V1.0

unaffected

Version	Status	Constraints
`0`	affected	< 0.14.0 2.0.0 v6092.0 Build 250417 Rel.24761n

TP-Link Systems Inc.

VX420-G2h(AU) V3.0

unaffected

Version	Status	Constraints
`0`	affected	< 0.2.0 2.0.0 v60df.0 Build 250427 Rel.38233n

No data.

Vendor Product Confidence Versions

Tp-link

Eb810v(eu1) V1.0

100%

Version	Status	Scheme	Platform
`[0,0.6.0 3.0.0 v608b.0 Build 250613 Rel.10497n)`	affected	generic	—

Tp-link

Ex220(br) V1.0/1.20/1.28/1.29/1.8

100%

Version	Status	Scheme	Platform
`[0,0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n)`	affected	generic	—

Tp-link

Ex220(br) V2.0

100%

Version	Status	Scheme	Platform
`[0,0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732n)`	affected	generic	—

Tp-link

Ex220(eu1) V1.0/1.20

100%

Version	Status	Scheme	Platform
`[0,0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n)`	affected	generic	—

Tp-link

Ex220(ru) V1.0

100%

Version	Status	Scheme	Platform
`[0,0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n)`	affected	generic	—

Tp-link

Ex220(us1) V1.0

100%

Version	Status	Scheme	Platform
`[0,0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n)`	affected	generic	—

Tp-link

Ex222(eu1) V1.0

100%

Version	Status	Scheme	Platform
`[0,0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n)`	affected	generic	—

Tp-link

Ex222(kr) V1.0

100%

Version	Status	Scheme	Platform
`[0,0.20.0 2.0.0 v609b.0 Build 260427 Rel.16915n)`	affected	generic	—

Tp-link

Ex222(us1) V1.0

100%

Version	Status	Scheme	Platform
`[0,0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n)`	affected	generic	—

Tp-link

Ex520v(eu1)1.0

100%

Version	Status	Scheme	Platform
`[0,0.1.0 3.0.0 v60ee.0 Build 250310 Rel.55637n)`	affected	generic	—

Tp-link

Ex820v(eu1) V1.0

100%

Version	Status	Scheme	Platform
`[0,0.4.0 3.1.9 v6087.0 Build 250928 Rel.59674n)`	affected	generic	—

Tp-link

Ex920(us2) V1.6/v1.0

100%

Version	Status	Scheme	Platform
`[0,0.8.0 3.2.2 v6080.0 Build 260309 Rel.54790n)`	affected	generic	—

Tp-link

Hb210(eu1) 1.0

100%

Version	Status	Scheme	Platform
`[0,0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n)`	affected	generic	—

Tp-link

Hb210(us2) 1.0

100%

Version	Status	Scheme	Platform
`[0,0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n)`	affected	generic	—

Tp-link

Hb210 Pro(eu1)1.0

100%

Version	Status	Scheme	Platform
`[0,0.5.0 3.0.0 v60d5.0 Build 250922 Rel.13742n)`	affected	generic	—

Tp-link

Hb210 Pro(us2)1.0/1.6

100%

Version	Status	Scheme	Platform
`[0,0.8.0 3.0.0 v60d5.0 Build 260318 Rel.78363n)`	affected	generic	—

Tp-link

Hb410( Eu1) 1.0

100%

Version	Status	Scheme	Platform
`[0,0.3.0 3.0.0 v60bf.0 Build 250901 Rel.45574n)`	affected	generic	—

Tp-link

Hb610(ca) V2.0

100%

Version	Status	Scheme	Platform
`[0,0.6.0 3.0.0 v60af.0 Build 251216 Rel.46954n)`	affected	generic	—

Tp-link

Hb610(eu1)

100%

Version	Status	Scheme	Platform
`[0,0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n)`	affected	generic	—

Tp-link

Hb610(us2) V2.6/2.0

100%

Version	Status	Scheme	Platform
`[0,0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n)`	affected	generic	—

Tp-link

Hb710(eu1) 1.0

100%

Version	Status	Scheme	Platform
`[0,0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n)`	affected	generic	—

Tp-link

Hb710(us2) V1.6/1.0

100%

Version	Status	Scheme	Platform
`[0,0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n)`	affected	generic	—

Tp-link

Hb810(eu1) V2.0

100%

Version	Status	Scheme	Platform
`[0,0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567n)`	affected	generic	—

Tp-link

Hb810(us2) V1.0/1.6/2.0/2.6

100%

Version	Status	Scheme	Platform
`[0,0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188n)`	affected	generic	—

Tp-link

Vx1800v(eu1) V1.0

100%

Version	Status	Scheme	Platform
`[0,0.14.0 2.0.0 v6092.0 Build 250417 Rel.24761n)`	affected	generic	—

Tp-link

Vx420-g2h(au) V3.0

100%

Version	Status	Scheme	Platform
`[0,0.2.0 2.0.0 v60df.0 Build 250427 Rel.38233n)`	affected	generic	—

Tp-link

Vx800v(de) V1.0

100%

Version	Status	Scheme	Platform
`[0,800.0.16)`	affected	generic	—

Tp-link

Xc220-g3v(eu1) V2.30

100%

Version	Status	Scheme	Platform
`[0,1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n)`	affected	generic	—

Tp-link

Xc220-g3v(us1) V2.30

100%

Version	Status	Scheme	Platform
`[0,1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n)`	affected	generic	—

Tp-link

Xx530v(br)v1.0

100%

Version	Status	Scheme	Platform
`[0,0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n)`	affected	generic	—

Tp-link

Xx530v(br)v2.0

100%

Version	Status	Scheme	Platform
`[0,0.4.0 3.1.10 v60dc.0 Build 250520 Rel.69748n)`	affected	generic	—

Tp-link

Xx530v(eu1)

100%

Version	Status	Scheme	Platform
`[0,0.3.0 3.1.10 v6107.0 Build 250425 Rel.71973n)`	affected	generic	—

Tp-link

Xx530v(us1)

100%

Version	Status	Scheme	Platform
`[0,0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n)`	affected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

Attack Vector Physical

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00174.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://www.tp-link.com/us/support/faq/5239/

History

Tue, 11 Aug 2026 15:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Tp-link Tp-link eb810v(eu1) V1.0 Tp-link ex220(br) V1.0/1.20/1.28/1.29/1.8 Tp-link ex220(br) V2.0 Tp-link ex220(eu1) V1.0/1.20 Tp-link ex220(ru) V1.0 Tp-link ex220(us1) V1.0 Tp-link ex222(eu1) V1.0 Tp-link ex222(kr) V1.0 Tp-link ex222(us1) V1.0 Tp-link ex520v(eu1)1.0 Tp-link ex820v(eu1) V1.0 Tp-link ex920(us2) V1.6/v1.0 Tp-link hb210(eu1) 1.0 Tp-link hb210(us2) 1.0 Tp-link hb210 Pro(eu1)1.0 Tp-link hb210 Pro(us2)1.0/1.6 Tp-link hb410( Eu1) 1.0 Tp-link hb610(ca) V2.0 Tp-link hb610(eu1) Tp-link hb610(us2) V2.6/2.0 Tp-link hb710(eu1) 1.0 Tp-link hb710(us2) V1.6/1.0 Tp-link hb810(eu1) V2.0 Tp-link hb810(us2) V1.0/1.6/2.0/2.6 Tp-link vx1800v(eu1) V1.0 Tp-link vx420-g2h(au) V3.0 Tp-link vx800v(de) V1.0 Tp-link xc220-g3v(eu1) V2.30 Tp-link xc220-g3v(us1) V2.30 Tp-link xx530v(br)v1.0 Tp-link xx530v(br)v2.0 Tp-link xx530v(eu1) Tp-link xx530v(us1)
Vendors & Products		Tp-link Tp-link eb810v(eu1) V1.0 Tp-link ex220(br) V1.0/1.20/1.28/1.29/1.8 Tp-link ex220(br) V2.0 Tp-link ex220(eu1) V1.0/1.20 Tp-link ex220(ru) V1.0 Tp-link ex220(us1) V1.0 Tp-link ex222(eu1) V1.0 Tp-link ex222(kr) V1.0 Tp-link ex222(us1) V1.0 Tp-link ex520v(eu1)1.0 Tp-link ex820v(eu1) V1.0 Tp-link ex920(us2) V1.6/v1.0 Tp-link hb210(eu1) 1.0 Tp-link hb210(us2) 1.0 Tp-link hb210 Pro(eu1)1.0 Tp-link hb210 Pro(us2)1.0/1.6 Tp-link hb410( Eu1) 1.0 Tp-link hb610(ca) V2.0 Tp-link hb610(eu1) Tp-link hb610(us2) V2.6/2.0 Tp-link hb710(eu1) 1.0 Tp-link hb710(us2) V1.6/1.0 Tp-link hb810(eu1) V2.0 Tp-link hb810(us2) V1.0/1.6/2.0/2.6 Tp-link vx1800v(eu1) V1.0 Tp-link vx420-g2h(au) V3.0 Tp-link vx800v(de) V1.0 Tp-link xc220-g3v(eu1) V2.30 Tp-link xc220-g3v(us1) V2.30 Tp-link xx530v(br)v1.0 Tp-link xx530v(br)v2.0 Tp-link xx530v(eu1) Tp-link xx530v(us1)

Mon, 10 Aug 2026 22:45:00 +0000

Type	Values Removed	Values Added
Description		The affected TP-Link Aginet devices do not properly validate symbolic links created on external USB storage devices. By placing a crafted symbolic link on supported storage media, an attacker may cause the system to resolve the link. Successful exploitation may allow unauthorized read access to sensitive files within the device filesystem.
Title		Arbitrary File Read via Improper Symlink Handling in USB HTTPS Access Path in multiple TP-Link Aginet Devices
Weaknesses		CWE-59
References		https://www.tp-link.com/us/support/faq/5239/
Metrics		cvssV4_0 `{'score': 5.1, 'vector': 'CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'}`

Subscriptions

Tp-link Eb810v(eu1) V1.0 Ex220(br) V1.0/1.20/1.28/1.29/1.8 Ex220(br) V2.0 Ex220(eu1) V1.0/1.20 Ex220(ru) V1.0 Ex220(us1) V1.0 Ex222(eu1) V1.0 Ex222(kr) V1.0 Ex222(us1) V1.0 Ex520v(eu1)1.0 Ex820v(eu1) V1.0 Ex920(us2) V1.6/v1.0 Hb210(eu1) 1.0 Hb210(us2) 1.0 Hb210 Pro(eu1)1.0 Hb210 Pro(us2)1.0/1.6 Hb410( Eu1) 1.0 Hb610(ca) V2.0 Hb610(eu1) Hb610(us2) V2.6/2.0 Hb710(eu1) 1.0 Hb710(us2) V1.6/1.0 Hb810(eu1) V2.0 Hb810(us2) V1.0/1.6/2.0/2.6 Vx1800v(eu1) V1.0 Vx420-g2h(au) V3.0 Vx800v(de) V1.0 Xc220-g3v(eu1) V2.30 Xc220-g3v(us1) V2.30 Xx530v(br)v1.0 Xx530v(br)v2.0 Xx530v(eu1) Xx530v(us1)

MITRE

Status: PUBLISHED

Assigner: TPLink

Published: 2026-08-10T22:25:41.776Z

Updated: 2026-08-10T22:25:41.776Z

Reserved: 2025-03-19T11:09:33.245Z

Link: CVE-2025-30240

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-10T23:16:50.463

Modified: 2026-08-10T23:16:50.463

Link: CVE-2025-30240

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-08-11T14:21:23Z

Weaknesses

CWE-59

Tracking

Attack Vector Physical

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object