CVE-2025-30239 PUBLISHED

Sensitive Data Exposure due to Hardcoded Cryptographic Keys in Multiple TP-Link Aginet Devices

Assigner: TPLink
Reserved: 19.03.2025 Published: 10.08.2026 Updated: 10.08.2026

In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data may allow an attacker who has access to device storage to recover the keys and decrypt stored data.

Successful exploitation may allow access to decrypted sensitive configuration data, including credentials and service-related information.

Metrics

CVSS Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
CVSS Score: 8.5

Product Status

Vendor TP-Link Systems Inc.
Product HB810(US2) V1.0/1.6/2.0/2.6
Versions Default: unaffected
  • affected from 0 to 0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188n (excl.)
Vendor TP-Link Systems Inc.
Product HB810(EU1) V2.0
Versions Default: unaffected
  • affected from 0 to 0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567n (excl.)
Vendor TP-Link Systems Inc.
Product HB710(US2) V1.6/1.0
Versions Default: unaffected
  • affected from 0 to 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n (excl.)
Vendor TP-Link Systems Inc.
Product HB710(EU1) 1.0
Versions Default: unaffected
  • affected from 0 to 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n (excl.)
Vendor TP-Link Systems Inc.
Product HB610(US2) V2.6/2.0
Versions Default: unaffected
  • affected from 0 to 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n (excl.)
Vendor TP-Link Systems Inc.
Product HB610(EU1)
Versions Default: unaffected
  • affected from 0 to 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n (excl.)
Vendor TP-Link Systems Inc.
Product HB610(CA) V2.0
Versions Default: unaffected
  • affected from 0 to 0.6.0 3.0.0 v60af.0 Build 251216 Rel.46954n (excl.)
Vendor TP-Link Systems Inc.
Product HB410( EU1) 1.0
Versions Default: unaffected
  • affected from 0 to 0.3.0 3.0.0 v60bf.0 Build 250901 Rel.45574n (excl.)
Vendor TP-Link Systems Inc.
Product HB210(US2) 1.0
Versions Default: unaffected
  • affected from 0 to 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n (excl.)
Vendor TP-Link Systems Inc.
Product HB210(EU1) 1.0
Versions Default: unaffected
  • affected from 0 to 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n (excl.)
Vendor TP-Link Systems Inc.
Product HB210 Pro(EU1)1.0
Versions Default: unaffected
  • affected from 0 to 0.5.0 3.0.0 v60d5.0 Build 250922 Rel.13742n (excl.)
Vendor TP-Link Systems Inc.
Product HB210 Pro(US2)1.0/1.6
Versions Default: unaffected
  • affected from 0 to 0.8.0 3.0.0 v60d5.0 Build 260318 Rel.78363n (excl.)
Vendor TP-Link Systems Inc.
Product HX510(US1) V2.0
Versions Default: unaffected
  • affected from 0 to 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n (excl.)
Vendor TP-Link Systems Inc.
Product HX510(EU1) V2.0
Versions Default: unaffected
  • affected from 0 to 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n (excl.)
Vendor TP-Link Systems Inc.
Product HX510(CA) V1.0/2.0
Versions Default: unaffected
  • affected from 0 to 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n (excl.)
Vendor TP-Link Systems Inc.
Product HX510(AU) V1.0/2.0
Versions Default: unaffected
  • affected from 0 to 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n (excl.)
Vendor TP-Link Systems Inc.
Product HX510(US2) 2.6
Versions Default: unaffected
  • affected from 0 to 0.17.0 3.2.2 v6065.0 Build 260722 Rel.10662n (excl.)
Vendor TP-Link Systems Inc.
Product HX710(EU1) V1.0
Versions Default: unaffected
  • affected from 0 to 0.5.0 3.1.10 v6075.0 Build 260511 Rel.47847n (excl.)
Vendor TP-Link Systems Inc.
Product HX710 Pro(EU1) V1.0
Versions Default: unaffected
  • affected from 0 to 0.4.0 3.1.10 v6082.0 Build 260204 Rel.49460n (excl.)
Vendor TP-Link Systems Inc.
Product HX220(US1) V1.0/1.0
Versions Default: unaffected
  • affected from 0 to 0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n (excl.)
Vendor TP-Link Systems Inc.
Product HX220(EU1) V1.0
Versions Default: unaffected
  • affected from 0 to 0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n (excl.)
Vendor TP-Link Systems Inc.
Product HX220(CA) V1.0
Versions Default: unaffected
  • affected from 0 to 0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n (excl.)
Vendor TP-Link Systems Inc.
Product HX220(AU) V1.0
Versions Default: unaffected
  • affected from 0 to 0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n (excl.)
Vendor TP-Link Systems Inc.
Product HX141(EU1) V1.0
Versions Default: unaffected
  • affected from 0 to 1.2.0 3.1.0 v609d.0 Build 260128 Rel.29711n (excl.)
Vendor TP-Link Systems Inc.
Product HC220-G5(US1) V1.0/1.6
Versions Default: unaffected
  • affected from 0 to 0.18.0 2.0.0 v605e.0 Build 250827 Rel.37904n (excl.)
Vendor TP-Link Systems Inc.
Product HC220-G5(EU1) V1.20/1.0
Versions Default: unaffected
  • affected from 0 to 0.18.0 2.0.0 v605e.0 Build 250827 Rel.37904n (excl.)
Vendor TP-Link Systems Inc.
Product HC220-G5(BR) V1.30
Versions Default: unaffected
  • affected from 0 to 0.17.0 2.0.0 v605e.0 Build 250618 Rel.19329n (excl.)
Vendor TP-Link Systems Inc.
Product EB210 Pro(EU1) 1.0
Versions Default: unaffected
  • affected from 0 to 0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901n (excl.)
Vendor TP-Link Systems Inc.
Product EB210 Pro(US1) 1.0
Versions Default: unaffected
  • affected from 0 to 0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901n (excl.)
Vendor TP-Link Systems Inc.
Product EB810v(EU1) V1.0
Versions Default: unaffected
  • affected from 0 to 0.6.0 3.0.0 v608b.0 Build 250613 Rel.10497n (excl.)
Vendor TP-Link Systems Inc.
Product EC220-G5(BR) V3.0
Versions Default: unaffected
  • affected from 0 to 1.14.1 Build 250715 Rel.72650n(4252) (excl.)
Vendor TP-Link Systems Inc.
Product EC220-G5(EU1) V3.0
Versions Default: unaffected
  • affected from 0 to 1.15.1 Build 260205 Rel.38208n(4555) (excl.)
Vendor TP-Link Systems Inc.
Product EC220-G5(US1) V3.0
Versions Default: unaffected
  • affected from 0 to 1.14.1 Build 250715 Rel.72650n(4252) (excl.)
Vendor TP-Link Systems Inc.
Product EC225-G5(BR) V1.0
Versions Default: unaffected
  • affected from 0 to 1.14.1 Build 250717 Rel.34953n(4252) (excl.)
Vendor TP-Link Systems Inc.
Product EC225-G5(EU1) V1.0
Versions Default: unaffected
  • affected from 0 to 1.14.1 Build 250711 Rel.35878n(4555) (excl.)
Vendor TP-Link Systems Inc.
Product EC225-G5(US1) V1.0
Versions Default: unaffected
  • affected from 0 to 1.1.14.1 Build 250711 Rel.35607n(5553) (excl.)
Vendor TP-Link Systems Inc.
Product EX141(BR) V1.0/1.9
Versions Default: unaffected
  • affected from 0 to 1.8.0 3.1.0 v608a.0 Build 250425 Rel.40905n (excl.)
Vendor TP-Link Systems Inc.
Product EX141(EU1) V1.0
Versions Default: unaffected
  • affected from 0 to 1.7.0 3.1.0 v608a.0 Build 250418 Rel.8257n (excl.)
Vendor TP-Link Systems Inc.
Product EX141(US1) V1.0
Versions Default: unaffected
  • affected from 0 to 1.7.0 3.1.0 v608a.0 Build 250418 Rel.8257n (excl.)
Vendor TP-Link Systems Inc.
Product EX220(BR) V1.0/1.20/1.28/1.29/1.8
Versions Default: unaffected
  • affected from 0 to 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n (excl.)
Vendor TP-Link Systems Inc.
Product EX220(BR) V2.0
Versions Default: unaffected
  • affected from 0 to 0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732n (excl.)
Vendor TP-Link Systems Inc.
Product EX220(EU1) V1.0/1.20
Versions Default: unaffected
  • affected from 0 to 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n (excl.)
Vendor TP-Link Systems Inc.
Product EX220(RU) V1.0
Versions Default: unaffected
  • affected from 0 to 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n (excl.)
Vendor TP-Link Systems Inc.
Product EX220(US1) V1.0
Versions Default: unaffected
  • affected from 0 to 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n (excl.)
Vendor TP-Link Systems Inc.
Product EX222(EU1) V1.0
Versions Default: unaffected
  • affected from 0 to 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n (excl.)
Vendor TP-Link Systems Inc.
Product EX222(KR) V1.0
Versions Default: unaffected
  • affected from 0 to 0.20.0 2.0.0 v609b.0 Build 260427 Rel.16915 (excl.)
Vendor TP-Link Systems Inc.
Product EX222(US1) V1.0
Versions Default: unaffected
  • affected from 0 to 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n (excl.)
Vendor TP-Link Systems Inc.
Product EX511(BR) V2.0/2.8/2.9
Versions Default: unaffected
  • affected from 0 to 0.9.0 3.0.0 v607e.0 Build 260520 Rel.33425n (excl.)
Vendor TP-Link Systems Inc.
Product EX511(EU1) V2.0
Versions Default: unaffected
  • affected from 0 to 0.9.0 3.0.0 v607e.0 Build 260520 Rel.33425n (excl.)
Vendor TP-Link Systems Inc.
Product EX511(US1) V2.0
Versions Default: unaffected
  • affected from 0 to 0.8.0 3.0.0 v607e.0 Build 260424 Rel.27419n (excl.)
Vendor TP-Link Systems Inc.
Product EX520(US1) V1.0
Versions Default: unaffected
  • affected from 0 to 0.7.0 3.0.0 v60b4.0 Build 251229 Rel.84306n (excl.)
Vendor TP-Link Systems Inc.
Product EX520v(EU1)1.0
Versions Default: unaffected
  • affected from 0 to 0.1.0 3.0.0 v60ee.0 Build 250310 Rel.55637n (excl.)
Vendor TP-Link Systems Inc.
Product EX521(US1) V1.0
Versions Default: unaffected
  • affected from 0 to 0.3.0 3.0.0 v60e3.0 Build 250925 Rel.66797n (excl.)
Vendor TP-Link Systems Inc.
Product EX820v(EU1) V1.0
Versions Default: unaffected
  • affected from 0 to 0.4.0 3.1.9 v6087.0 Build 250928 Rel.59674n (excl.)
Vendor TP-Link Systems Inc.
Product EX920(US2) V1.6/V1.0
Versions Default: unaffected
  • affected from 0 to 0.8.0 3.2.2 v6080.0 Build 260309 Rel.54790n (excl.)
Vendor TP-Link Systems Inc.
Product XC220-G3v(EU1) V2.30
Versions Default: unaffected
  • affected from 0 to 1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n (excl.)
Vendor TP-Link Systems Inc.
Product XC220-G3v(US1) V2.30
Versions Default: unaffected
  • affected from 0 to 1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n (excl.)
Vendor TP-Link Systems Inc.
Product XX530v(BR)v1.0
Versions Default: unaffected
  • affected from 0 to 0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n (excl.)
Vendor TP-Link Systems Inc.
Product XX530v(BR)v2.0
Versions Default: unaffected
  • affected from 0 to 0.4.0 3.1.10 v60dc.0 Build 250520 Rel.69748n (excl.)
Vendor TP-Link Systems Inc.
Product XX530v(US1)
Versions Default: unaffected
  • affected from 0 to 0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n (excl.)
Vendor TP-Link Systems Inc.
Product XX530v(EU1)
Versions Default: unaffected
  • affected from 0 to 0.3.0 3.1.10 v6107.0 Build 250425 Rel.71973n (excl.)
Vendor TP-Link Systems Inc.
Product XX230v(BR) V1.0
Versions Default: unaffected
  • affected from 0 to 0.16.0 3.0.0 v6066.0 Build 250423 Rel.43799n (excl.)
Vendor TP-Link Systems Inc.
Product VX800v(DE) V1.0
Versions Default: unaffected
  • affected from 0 to 800.0.16 (excl.)
Vendor TP-Link Systems Inc.
Product VX1800v(EU1) V1.0
Versions Default: unaffected
  • affected from 0 to 0.14.0 2.0.0 v6092.0 Build 250417 Rel.24761n (excl.)
Vendor TP-Link Systems Inc.
Product VX420-G2h(AU) V3.0
Versions Default: unaffected
  • affected from 0 to 0.2.0 2.0.0 v60df.0 Build 250427 Rel.38233n (excl.)

Credits

  • Gerhard Hechenberger, Stefan Schweighofer, Constantin Schieber-Knoebl from the SEC Consult Vulnerability Lab finder

References

Problem Types

  • CWE-321: Use of Hard-coded Cryptographic Key CWE

Impacts

  • CAPEC-37: Retrieve Embedded Sensitive Data