Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2025-30240

Arbitrary File Read via Improper Symlink Handling in USB HTTPS Access Path in multiple TP-Link Aginet Devices

CVSS 5.1 MediumEPSS 0.0023 · 14th percentile

Published by the CVE Program (CNA: TPLink) at 10 Aug 2026, 22:25 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
TP-Link Systems Inc. HB810(US2) V1.0/1.6/2.0/2.6
  • affected before 0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188n custom
Other versions: unaffected
TP-Link Systems Inc. HB810(EU1) V2.0
  • affected before 0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567n custom
Other versions: unaffected
TP-Link Systems Inc. HB710(US2) V1.6/1.0
  • affected before 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n custom
Other versions: unaffected
TP-Link Systems Inc. HB710(EU1) 1.0
  • affected before 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n custom
Other versions: unaffected
TP-Link Systems Inc. HB610(US2) V2.6/2.0
  • affected before 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n custom
Other versions: unaffected
TP-Link Systems Inc. HB610(EU1)
  • affected before 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n custom
Other versions: unaffected
TP-Link Systems Inc. HB610(CA) V2.0
  • affected before 0.6.0 3.0.0 v60af.0 Build 251216 Rel.46954n custom
Other versions: unaffected
TP-Link Systems Inc. HB410( EU1) 1.0
  • affected before 0.3.0 3.0.0 v60bf.0 Build 250901 Rel.45574n custom
Other versions: unaffected
TP-Link Systems Inc. HB210(US2) 1.0
  • affected before 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n custom
Other versions: unaffected
TP-Link Systems Inc. HB210(EU1) 1.0
  • affected before 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n custom
Other versions: unaffected
TP-Link Systems Inc. HB210 Pro(EU1)1.0
  • affected before 0.5.0 3.0.0 v60d5.0 Build 250922 Rel.13742n custom
Other versions: unaffected
TP-Link Systems Inc. HB210 Pro(US2)1.0/1.6
  • affected before 0.8.0 3.0.0 v60d5.0 Build 260318 Rel.78363n custom
Other versions: unaffected
TP-Link Systems Inc. EB810v(EU1) V1.0
  • affected before 0.6.0 3.0.0 v608b.0 Build 250613 Rel.10497n custom
Other versions: unaffected
TP-Link Systems Inc. EX220(BR) V1.0/1.20/1.28/1.29/1.8
  • affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n custom
Other versions: unaffected
TP-Link Systems Inc. EX220(BR) V2.0
  • affected before 0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732n custom
Other versions: unaffected
TP-Link Systems Inc. EX220(EU1) V1.0/1.20
  • affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n custom
Other versions: unaffected
TP-Link Systems Inc. EX220(RU) V1.0
  • affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n custom
Other versions: unaffected
TP-Link Systems Inc. EX220(US1) V1.0
  • affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n custom
Other versions: unaffected
TP-Link Systems Inc. EX222(EU1) V1.0
  • affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n custom
Other versions: unaffected
TP-Link Systems Inc. EX222(KR) V1.0
  • affected before 0.20.0 2.0.0 v609b.0 Build 260427 Rel.16915 custom
Other versions: unaffected
TP-Link Systems Inc. EX222(US1) V1.0
  • affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n custom
Other versions: unaffected
TP-Link Systems Inc. EX520v(EU1)1.0
  • affected before 0.1.0 3.0.0 v60ee.0 Build 250310 Rel.55637n custom
Other versions: unaffected
TP-Link Systems Inc. EX820v(EU1) V1.0
  • affected before 0.4.0 3.1.9 v6087.0 Build 250928 Rel.59674n custom
Other versions: unaffected
TP-Link Systems Inc. EX920(US2) V1.6/V1.0
  • affected before 0.8.0 3.2.2 v6080.0 Build 260309 Rel.54790n custom
Other versions: unaffected
TP-Link Systems Inc. XC220-G3v(EU1) V2.30
  • affected before 1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n custom
Other versions: unaffected
TP-Link Systems Inc. XC220-G3v(US1) V2.30
  • affected before 1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n custom
Other versions: unaffected
TP-Link Systems Inc. XX530v(BR)v1.0
  • affected before 0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n custom
Other versions: unaffected
TP-Link Systems Inc. XX530v(BR)v2.0
  • affected before 0.4.0 3.1.10 v60dc.0 Build 250520 Rel.69748n custom
Other versions: unaffected
TP-Link Systems Inc. XX530v(US1)
  • affected before 0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n custom
Other versions: unaffected
TP-Link Systems Inc. XX530v(EU1)
  • affected before 0.3.0 3.1.10 v6107.0 Build 250425 Rel.71973n custom
Other versions: unaffected
TP-Link Systems Inc. VX800v(DE) V1.0
  • affected before 800.0.16 custom
Other versions: unaffected
TP-Link Systems Inc. VX1800v(EU1) V1.0
  • affected before 0.14.0 2.0.0 v6092.0 Build 250417 Rel.24761n custom
Other versions: unaffected
TP-Link Systems Inc. VX420-G2h(AU) V3.0
  • affected before 0.2.0 2.0.0 v60df.0 Build 250427 Rel.38233n custom
Other versions: unaffected
Identifiers
CVE-2025-30240
CNA
TPLink
Weakness (CWE)
CWE-59
Tags
Published
10 Aug 2026
Updated
12 Aug 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

ScoreRatingCVSSVectorSource
5.1 Medium 4.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N CNA (TPLink)
  • CISA KEV Not listed.
  • EPSS 0.0023, the 14th percentile, on 10 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 10 Aug 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.