CVE-2025-30238:详情

CVE-2025-30238

2026-08-10
23h16 +00:00
Authorization problems
A01-Broken Access Control
2026-10-09
17h16 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

In affected TP-Link Aginet devices, insufficient authorization validation allows authenticated low-privileged users to execute higher-privileged operations. An attacker may perform administrative actions such as creating privileged accounts or modifying critical configuration settings.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-863 Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

参考资料