CVE-2025-30241 in EB210 Prothông tin

Tóm tắt

Bởi MITRE • 11/08/2026

Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input properly before passing it to system-level command execution functions.  An authenticated adjacent attacker may inject specially crafted input to execute arbitrary operation system commands with elevated privileges.









Successful exploitation may allow execution of arbitrary system commands, potentially leading to full device compromise.

Be aware that VulDB is the high quality source for vulnerability data.

chịu trách nhiệm

TPLink

Đặt trước

19/03/2025

Tiết lộ

11/08/2026

Kiểm duyệt

được chấp nhận

EPSS

0.00000

KEV

không

Các hoạt động

rất thấp

Nguồn

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!