{"id":"CVE-2025-30238","title":"In affected TP-Link Aginet devices, insufficient\nauthorization validation allows authenticated low-privileged users to execute higher-privileged\noperations.\n\n\n\n\n\nAn attacker\nmay perform administrative actions such as creating privileged …","summary":"In affected TP-Link Aginet devices, insufficient\nauthorization validation allows authenticated low-privileged users to execute higher-privileged\noperations.\n\n\n\n\n\nAn attacker\nmay perform administrative actions such as creating privileged …","severity":"none","cwe":["CWE-863"],"published":"2026-08-10","updated":"2026-09-29","sourceUpdated":"2026-09-29T11:10:00.150","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-30238","references":[{"url":"https://www.tp-link.com/us/support/faq/5239/","label":"f23511db-6c3e-4e32-a477-6aa17d310630"}],"tags":["nvd"],"ingestedAt":"2026-09-29T11:32:41.225Z","slug":"CVE-2025-30238","body":"## Overview\n\nIn affected TP-Link Aginet devices, insufficient\nauthorization validation allows authenticated low-privileged users to execute higher-privileged\noperations.\n\n\n\n\n\nAn attacker\nmay perform administrative actions such as creating privileged accounts or\nmodifying critical configuration settings.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}