CVE-2025-30237
Gravedad CVSS v4.0:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
10/08/2026
Última modificación:
10/08/2026
Descripción
*** Pendiente de traducción *** The affected TP-Link Aginet devices contain a flaw in the web management interface where authentication<br />
checks are not consistently enforced on certain endpoints. An attacker can send<br />
specially crafted requests to bypass authentication and directly invoke<br />
privileged functionality without valid credentials. This issue arises from<br />
improper enforcement of access control mechanisms on sensitive operations.<br />
<br />
<br />
<br />
<br />
<br />
Successful<br />
exploitation may allow an unauthenticated attacker to execute privileged<br />
operations and gain full control of the device.
Impacto
Puntuación base 4.0
8.70
Gravedad 4.0
ALTA