Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input properly before passing it to system-level command execution functions. An authenticated adjacent attacker may inject specially crafted input to execute arbitrary operation system commands with elevated privileges. Successful exploitation may allow execution of arbitrary system commands, potentially leading to full device compromise.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
4/6 💻 CVE-2025-30241 (CVSS 8.6) permite inyección de comandos del sistema operativo. En una cadena de ataque, esta vulnerabilidad podría llevar a ejecución arbitraria y, potencialmente, al control total del dispositivo afectado.
Post summary
The post announces CVE-2025-30241, noting a CVSS score of 8.6 and describing it as a system‑command injection that could lead to arbitrary execution and full device control.