CVE-2025-30237
Severity CVSS v4.0:
HIGH
Type:
Unavailable / Other
Publication date:
10/08/2026
Last modified:
10/08/2026
Description
The affected TP-Link Aginet devices contain a flaw in the web management interface where authentication<br />
checks are not consistently enforced on certain endpoints. An attacker can send<br />
specially crafted requests to bypass authentication and directly invoke<br />
privileged functionality without valid credentials. This issue arises from<br />
improper enforcement of access control mechanisms on sensitive operations.<br />
<br />
<br />
<br />
<br />
<br />
Successful<br />
exploitation may allow an unauthenticated attacker to execute privileged<br />
operations and gain full control of the device.
Impact
Base Score 4.0
8.70
Severity 4.0
HIGH