Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Dismissed
(no matching packages found)
Permalink CVE-2025-30241
8.6 HIGH
  • CVSS version (CVSS): 4.0
  • Attack Vector (AV): Adjacent (A)
  • Attack Complexity (AC): Low (L)
  • Attack Requirement (AT): None (N)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): None (N)
  • Vulnerable System Impact Confidentiality (VC): High (H)
  • Vulnerable System Impact Integrity (VI): High (H)
  • Vulnerable System Impact Availability (VA): High (H)
  • Subsequent System Impact Confidentiality (SC): None (N)
  • Subsequent System Impact Integrity (SI): None (N)
  • Subsequent System Impact Availability (SA): None (N)
  • Modified Attack Vector (MAV): Adjacent (A)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Attack Requirement (MAT): None (N)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): None (N)
  • Modified Vulnerable System Impact Confidentiality (MVC): High (H)
  • Modified Vulnerable System Impact Integrity (MVI): High (H)
  • Modified Vulnerable System Impact Availability (MVA): High (H)
  • Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
  • Modified Subsequent System Impact Integrity (MSI): Negligible (N)
  • Modified Subsequent System Impact Availability (MSA): Negligible (N)
  • Safety (S): Not Defined (X)
  • Automatable (AU): Not Defined (X)
  • Recovery (R): Not Defined (X)
  • Value Density (V): Not Defined (X)
  • Vulnerability Response Effort (RE): Not Defined (X)
  • Provider Urgency (U): Not Defined (X)
  • Confidentiality Req. (CR): Not Defined (X)
  • Integrity Req. (IR): Not Defined (X)
  • Availability Req. (AR): Not Defined (X)
  • Exploit Maturity (E): Not Defined (X)
created 3 weeks, 6 days ago Activity log
  • Created & dismissed (no matching packages found) suggestion 3 weeks, 6 days ago
OS Command Injection in Web Interface in Multiple TP-Link Aginet Devices

Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input properly before passing it to system-level command execution functions.  An authenticated adjacent attacker may inject specially crafted input to execute arbitrary operation system commands with elevated privileges. Successful exploitation may allow execution of arbitrary system commands, potentially leading to full device compromise.

References

Affected products

HB610(EU1)
  • <0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n
XX530v(EU1)
  • <0.3.0 3.1.10 v6107.0 Build 250425 Rel.71973n
EX220(BR) V2.0
  • <0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732n
EX220(RU) V1.0
  • <0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
EX222(KR) V1.0
  • <0.20.0 2.0.0 v609b.0 Build 260427 Rel.16915
EX520v(EU1)1.0
  • <0.1.0 3.0.0 v60ee.0 Build 250310 Rel.55637n
HB210(EU1) 1.0
  • <0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n
HB210(US2) 1.0
  • <0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n
HB610(CA) V2.0
  • <0.6.0 3.0.0 v60af.0 Build 251216 Rel.46954n
HB710(EU1) 1.0
  • <0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n
XX530v(BR)v2.0
  • <0.4.0 3.1.10 v60dc.0 Build 250520 Rel.69748n
EX220(US1) V1.0
  • <0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
EX222(EU1) V1.0
  • <0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
EX222(US1) V1.0
  • <0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
HB410( EU1) 1.0
  • <0.3.0 3.0.0 v60bf.0 Build 250901 Rel.45574n
HB810(EU1) V2.0
  • <0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567n
VX800v(DE) V1.0
  • <800.0.16
XX230v(BR) V1.0
  • <0.16.0 3.0.0 v6066.0 Build 250423 Rel.43799n
EB810v(EU1) V1.0
  • <0.6.0 3.0.0 v608b.0 Build 250613 Rel.10497n
EX820v(EU1) V1.0
  • <0.4.0 3.1.9 v6087.0 Build 250928 Rel.59674n
HB210 Pro(EU1)1.0
  • <0.5.0 3.0.0 v60d5.0 Build 250922 Rel.13742n
EB210 Pro(EU1) 1.0
  • <0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901n
EB210 Pro(US1) 1.0
  • <0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901n
VX420-G2h(AU) V3.0
  • <0.2.0 2.0.0 v60df.0 Build 250427 Rel.38233n
HB610(US2) V2.6/2.0
  • <0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n
HB710(US2) V1.6/1.0
  • <0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n
EX220(EU1) V1.0/1.20
  • <0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
EX920(US2) V1.6/V1.0
  • <0.8.0 3.2.2 v6080.0 Build 260309 Rel.54790n
HB210 Pro(US2)1.0/1.6
  • <0.8.0 3.0.0 v60d5.0 Build 260318 Rel.78363n
HB810(US2) V1.0/1.6/2.0/2.6
  • <0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188n
EX220(BR) V1.0/1.20/1.28/1.29/1.8
  • <0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n