CVE-2025-30240

Name of the Vulnerable Software and Affected Versions TP-Link Aginet (affected versions not specified)

Description TP-Link Aginet devices fail to properly validate symbolic links created on external USB storage devices. A symbolic link is a special type of file that serves as a reference to another file or directory. By placing a crafted symbolic link on supported storage media, an attacker can force the system to resolve the link, potentially granting unauthorized read access to sensitive files within the device filesystem.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.