CVE-2025-30239
Severity CVSS v4.0:
HIGH
Type:
CWE-321
Use of Hard-coded Cryptographic Key
Publication date:
10/08/2026
Last modified:
10/08/2026
Description
In affected TP-Link Aginet devices, use of<br />
hardcoded cryptographic keys embedded in the firmware to protect sensitive<br />
configuration data may allow an attacker who has access to device storage to<br />
recover the keys and decrypt stored data.<br />
<br />
<br />
<br />
<br />
<br />
Successful<br />
exploitation may allow access to decrypted sensitive configuration data,<br />
including credentials and service-related information.
Impact
Base Score 4.0
8.50
Severity 4.0
HIGH