Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Dismissed
(no matching packages found)
Permalink CVE-2025-30239
8.5 HIGH
  • CVSS version (CVSS): 4.0
  • Attack Vector (AV): Adjacent (A)
  • Attack Complexity (AC): Low (L)
  • Attack Requirement (AT): None (N)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): None (N)
  • Vulnerable System Impact Confidentiality (VC): High (H)
  • Vulnerable System Impact Integrity (VI): High (H)
  • Vulnerable System Impact Availability (VA): None (N)
  • Subsequent System Impact Confidentiality (SC): None (N)
  • Subsequent System Impact Integrity (SI): None (N)
  • Subsequent System Impact Availability (SA): None (N)
  • Modified Attack Vector (MAV): Adjacent (A)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Attack Requirement (MAT): None (N)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): None (N)
  • Modified Vulnerable System Impact Confidentiality (MVC): High (H)
  • Modified Vulnerable System Impact Integrity (MVI): High (H)
  • Modified Vulnerable System Impact Availability (MVA): None (N)
  • Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
  • Modified Subsequent System Impact Integrity (MSI): Negligible (N)
  • Modified Subsequent System Impact Availability (MSA): Negligible (N)
  • Safety (S): Not Defined (X)
  • Automatable (AU): Not Defined (X)
  • Recovery (R): Not Defined (X)
  • Value Density (V): Not Defined (X)
  • Vulnerability Response Effort (RE): Not Defined (X)
  • Provider Urgency (U): Not Defined (X)
  • Confidentiality Req. (CR): Not Defined (X)
  • Integrity Req. (IR): Not Defined (X)
  • Availability Req. (AR): Not Defined (X)
  • Exploit Maturity (E): Not Defined (X)
created 4 weeks ago Activity log
  • Created & dismissed (no matching packages found) suggestion 4 weeks ago
Sensitive Data Exposure due to Hardcoded Cryptographic Keys in Multiple TP-Link Aginet Devices

In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data may allow an attacker who has access to device storage to recover the keys and decrypt stored data. Successful exploitation may allow access to decrypted sensitive configuration data, including credentials and service-related information.

References

Affected products

HB610(EU1)
  • <0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n
XX530v(EU1)
  • <0.3.0 3.1.10 v6107.0 Build 250425 Rel.71973n
XX530v(US1)
  • <0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n
EX220(BR) V2.0
  • <0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732n
EX220(RU) V1.0
  • <0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
EX222(KR) V1.0
  • <0.20.0 2.0.0 v609b.0 Build 260427 Rel.16915
EX520v(EU1)1.0
  • <0.1.0 3.0.0 v60ee.0 Build 250310 Rel.55637n
HB210(EU1) 1.0
  • <0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n
HB210(US2) 1.0
  • <0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n
HB610(CA) V2.0
  • <0.6.0 3.0.0 v60af.0 Build 251216 Rel.46954n
HB710(EU1) 1.0
  • <0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n
HX220(AU) V1.0
  • <0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n
HX220(CA) V1.0
  • <0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n
HX510(US2) 2.6
  • <0.17.0 3.2.2 v6065.0 Build 260722 Rel.10662n
XX530v(BR)v1.0
  • <0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n
XX530v(BR)v2.0
  • <0.4.0 3.1.10 v60dc.0 Build 250520 Rel.69748n
EX141(EU1) V1.0
  • <1.7.0 3.1.0 v608a.0 Build 250418 Rel.8257n
EX141(US1) V1.0
  • <1.7.0 3.1.0 v608a.0 Build 250418 Rel.8257n
EX220(US1) V1.0
  • <0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
EX222(EU1) V1.0
  • <0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
EX222(US1) V1.0
  • <0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
EX511(EU1) V2.0
  • <0.9.0 3.0.0 v607e.0 Build 260520 Rel.33425n
EX511(US1) V2.0
  • <0.8.0 3.0.0 v607e.0 Build 260424 Rel.27419n
EX520(US1) V1.0
  • <0.7.0 3.0.0 v60b4.0 Build 251229 Rel.84306n
EX521(US1) V1.0
  • <0.3.0 3.0.0 v60e3.0 Build 250925 Rel.66797n
HB410( EU1) 1.0
  • <0.3.0 3.0.0 v60bf.0 Build 250901 Rel.45574n
HB810(EU1) V2.0
  • <0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567n
HX141(EU1) V1.0
  • <1.2.0 3.1.0 v609d.0 Build 260128 Rel.29711n
HX220(EU1) V1.0
  • <0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n
HX510(EU1) V2.0
  • <0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n
HX510(US1) V2.0
  • <0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n
HX710(EU1) V1.0
  • <0.5.0 3.1.10 v6075.0 Build 260511 Rel.47847n
VX800v(DE) V1.0
  • <800.0.16
XX230v(BR) V1.0
  • <0.16.0 3.0.0 v6066.0 Build 250423 Rel.43799n
EB810v(EU1) V1.0
  • <0.6.0 3.0.0 v608b.0 Build 250613 Rel.10497n
EX820v(EU1) V1.0
  • <0.4.0 3.1.9 v6087.0 Build 250928 Rel.59674n
EC220-G5(BR) V3.0
  • <1.14.1 Build 250715 Rel.72650n(4252)
EC225-G5(BR) V1.0
  • <1.14.1 Build 250717 Rel.34953n(4252)
HB210 Pro(EU1)1.0
  • <0.5.0 3.0.0 v60d5.0 Build 250922 Rel.13742n
VX1800v(EU1) V1.0
  • <0.14.0 2.0.0 v6092.0 Build 250417 Rel.24761n
EB210 Pro(EU1) 1.0
  • <0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901n
EB210 Pro(US1) 1.0
  • <0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901n
EC220-G5(EU1) V3.0
  • <1.15.1 Build 260205 Rel.38208n(4555)
EC220-G5(US1) V3.0
  • <1.14.1 Build 250715 Rel.72650n(4252)
EC225-G5(EU1) V1.0
  • <1.14.1 Build 250711 Rel.35878n(4555)
EC225-G5(US1) V1.0
  • <1.1.14.1 Build 250711 Rel.35607n(5553)
EX141(BR) V1.0/1.9
  • <1.8.0 3.1.0 v608a.0 Build 250425 Rel.40905n
HC220-G5(BR) V1.30
  • <0.17.0 2.0.0 v605e.0 Build 250618 Rel.19329n
HX510(AU) V1.0/2.0
  • <0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n
HX510(CA) V1.0/2.0
  • <0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n
VX420-G2h(AU) V3.0
  • <0.2.0 2.0.0 v60df.0 Build 250427 Rel.38233n
HB610(US2) V2.6/2.0
  • <0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n
HB710(US2) V1.6/1.0
  • <0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n
HX220(US1) V1.0/1.0
  • <0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n
HX710 Pro(EU1) V1.0
  • <0.4.0 3.1.10 v6082.0 Build 260204 Rel.49460n
EX220(EU1) V1.0/1.20
  • <0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
EX920(US2) V1.6/V1.0
  • <0.8.0 3.2.2 v6080.0 Build 260309 Rel.54790n
XC220-G3v(EU1) V2.30
  • <1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n
XC220-G3v(US1) V2.30
  • <1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n
HB210 Pro(US2)1.0/1.6
  • <0.8.0 3.0.0 v60d5.0 Build 260318 Rel.78363n
EX511(BR) V2.0/2.8/2.9
  • <0.9.0 3.0.0 v607e.0 Build 260520 Rel.33425n
HC220-G5(US1) V1.0/1.6
  • <0.18.0 2.0.0 v605e.0 Build 250827 Rel.37904n
HC220-G5(EU1) V1.20/1.0
  • <0.18.0 2.0.0 v605e.0 Build 250827 Rel.37904n
HB810(US2) V1.0/1.6/2.0/2.6
  • <0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188n
EX220(BR) V1.0/1.20/1.28/1.29/1.8
  • <0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n