CVE-2025-30237

Name of the Vulnerable Software and Affected Versions TP-Link Aginet (affected versions not specified)

Description TP-Link Aginet devices contain a flaw in the web management interface where authentication checks are not consistently enforced on certain endpoints. This issue results from improper enforcement of access control mechanisms on sensitive operations, allowing an unauthenticated attacker to send specially crafted requests to bypass authentication and directly invoke privileged functionality. Successful exploitation may enable an attacker to execute privileged operations and gain full control of the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.