Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The affected TP-Link Aginet devices contain a flaw in the web management interface where authentication checks are not consistently enforced on certain endpoints. An attacker can send specially crafted requests to bypass authentication and directly invoke privileged functionality without valid credentials. This issue arises from improper enforcement of access control mechanisms on sensitive operations. Successful exploitation may allow an unauthenticated attacker to execute privileged operations and gain full control of the device.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-08-12 | 1 | General1 |
| 2026-08-14 | 1 | Disclosure1 |
1/6 🔓 CVE-2025-30237 (CVSS 8.7) permite evadir la autenticación en la interfaz web sin credenciales válidas. En un entorno vulnerable, un atacante podría acceder a funciones protegidas y avanzar hacia un compromiso mayor del dispositivo.
Post summary
The message announces CVE-2025-30237, citing a CVSS score of 8.7 and describing an authentication bypass that could lead to further device compromise.
一次情報(NVD): https://nvd.nist.gov/vuln/detail/CVE-2025-30237 参照元(ベンダー等): https://www.tp-link.com/us/support/faq/5239/
Post summary
The post merely references a CVE via two links, offering no additional context, PoC, exploit, or remediation details.