Medium severity · published Aug 10, 2026
CVE-2025-30240
Arbitrary File Read via Improper Symlink Handling in USB HTTPS Access Path in multiple TP-Link Aginet Devices
5.1
CVSS
0.2%
EPSS
No
On KEV
Description
The affected TP-Link Aginet devices do not properly validate symbolic links created on external USB storage
devices. By placing a crafted symbolic link on supported storage media, an
attacker may cause the system to resolve the link.
Successful
exploitation may allow unauthorized read access to sensitive files within the
device filesystem.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 14% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EV
EB810v(EU1) V1.0 · TP-Link Systems Inc.
before 0.6.0 3.0.0 v608b.0 Build 250613 Rel.10497n · source: vendor
EV
EX220(BR) V1.0/1.20/1.28/1.29/1.8 · TP-Link Systems Inc.
before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n · source: vendor
EV
EX220(BR) V2.0 · TP-Link Systems Inc.
before 0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732n · source: vendor
EV
EX220(EU1) V1.0/1.20 · TP-Link Systems Inc.
before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n · source: vendor
EV
EX220(RU) V1.0 · TP-Link Systems Inc.
before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n · source: vendor
EV
EX220(US1) V1.0 · TP-Link Systems Inc.
before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n · source: vendor
EV
EX222(EU1) V1.0 · TP-Link Systems Inc.
before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n · source: vendor
EV
EX222(KR) V1.0 · TP-Link Systems Inc.
before 0.20.0 2.0.0 v609b.0 Build 260427 Rel.16915 · source: vendor
EV
EX222(US1) V1.0 · TP-Link Systems Inc.
before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n · source: vendor
EX
EX520v(EU1)1.0 · TP-Link Systems Inc.
before 0.1.0 3.0.0 v60ee.0 Build 250310 Rel.55637n · source: vendor
EV
EX820v(EU1) V1.0 · TP-Link Systems Inc.
before 0.4.0 3.1.9 v6087.0 Build 250928 Rel.59674n · source: vendor
EV
EX920(US2) V1.6/V1.0 · TP-Link Systems Inc.
before 0.8.0 3.2.2 v6080.0 Build 260309 Rel.54790n · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-30240
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-30240
www.tp-link.com
https://www.tp-link.com/us/support/faq/5239/
More from EB810v(EU1) V1.0
8.6
CVE-2025-30241
OS Command Injection in Web Interface in Multiple TP-Link Aginet Devices
8.6
CVE-2025-30238
Privilege Escalation via Improper Authorization in User Management in multiple TP-Link Aginet Devices
8.5
CVE-2025-30239
Sensitive Data Exposure due to Hardcoded Cryptographic Keys in Multiple TP-Link Aginet Devices