CVE-2025-30240 | BDVDB-2026-356540 Detail
TP-LinkHB810(US2) V1.0/1.6/2.0/2.6
Description#
The affected TP-Link Aginet devices do not properly validate symbolic links created on external USB storage devices. By placing a crafted symbolic link on supported storage media, an attacker may cause the system to resolve the link. Successful exploitation may allow unauthorized read access to sensitive files within the device filesystem.
Impact#
CAPEC-132: Symlink Attack
Weaknesses#
- CWE-59 Improper Link Resolution Before File Access
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.