High severity · published Aug 10, 2026
CVE-2025-30239
Sensitive Data Exposure due to Hardcoded Cryptographic Keys in Multiple TP-Link Aginet Devices
8.5
CVSS
0.2%
EPSS
No
On KEV
Description
In affected TP-Link Aginet devices, use of
hardcoded cryptographic keys embedded in the firmware to protect sensitive
configuration data may allow an attacker who has access to device storage to
recover the keys and decrypt stored data.
Successful
exploitation may allow access to decrypted sensitive configuration data,
including credentials and service-related information.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 9% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EP
EB210 Pro(EU1) 1.0 · TP-Link Systems Inc.
before 0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901n · source: vendor
EP
EB210 Pro(US1) 1.0 · TP-Link Systems Inc.
before 0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901n · source: vendor
EV
EB810v(EU1) V1.0 · TP-Link Systems Inc.
before 0.6.0 3.0.0 v608b.0 Build 250613 Rel.10497n · source: vendor
EV
EC220-G5(BR) V3.0 · TP-Link Systems Inc.
before 1.14.1 Build 250715 Rel.72650n(4252) · source: vendor
EV
EC220-G5(EU1) V3.0 · TP-Link Systems Inc.
before 1.15.1 Build 260205 Rel.38208n(4555) · source: vendor
EV
EC220-G5(US1) V3.0 · TP-Link Systems Inc.
before 1.14.1 Build 250715 Rel.72650n(4252) · source: vendor
EV
EC225-G5(BR) V1.0 · TP-Link Systems Inc.
before 1.14.1 Build 250717 Rel.34953n(4252) · source: vendor
EV
EC225-G5(EU1) V1.0 · TP-Link Systems Inc.
before 1.14.1 Build 250711 Rel.35878n(4555) · source: vendor
EV
EC225-G5(US1) V1.0 · TP-Link Systems Inc.
before 1.1.14.1 Build 250711 Rel.35607n(5553) · source: vendor
EV
EX141(BR) V1.0/1.9 · TP-Link Systems Inc.
before 1.8.0 3.1.0 v608a.0 Build 250425 Rel.40905n · source: vendor
EV
EX141(EU1) V1.0 · TP-Link Systems Inc.
before 1.7.0 3.1.0 v608a.0 Build 250418 Rel.8257n · source: vendor
EV
EX141(US1) V1.0 · TP-Link Systems Inc.
before 1.7.0 3.1.0 v608a.0 Build 250418 Rel.8257n · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-30239
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-30239
vendor-advisory
https://www.tp-link.com/us/support/faq/5239/
More from EB210 Pro(EU1) 1.0
8.6
CVE-2025-30241
OS Command Injection in Web Interface in Multiple TP-Link Aginet Devices
8.6
CVE-2025-30238
Privilege Escalation via Improper Authorization in User Management in multiple TP-Link Aginet Devices
