Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Dismissed
(no matching packages found)
Permalink CVE-2025-30240
5.1 MEDIUM
  • CVSS version (CVSS): 4.0
  • Attack Vector (AV): Physical (P)
  • Attack Complexity (AC): Low (L)
  • Attack Requirement (AT): None (N)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): None (N)
  • Vulnerable System Impact Confidentiality (VC): High (H)
  • Vulnerable System Impact Integrity (VI): None (N)
  • Vulnerable System Impact Availability (VA): None (N)
  • Subsequent System Impact Confidentiality (SC): None (N)
  • Subsequent System Impact Integrity (SI): None (N)
  • Subsequent System Impact Availability (SA): None (N)
  • Modified Attack Vector (MAV): Physical (P)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Attack Requirement (MAT): None (N)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): None (N)
  • Modified Vulnerable System Impact Confidentiality (MVC): High (H)
  • Modified Vulnerable System Impact Integrity (MVI): None (N)
  • Modified Vulnerable System Impact Availability (MVA): None (N)
  • Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
  • Modified Subsequent System Impact Integrity (MSI): Negligible (N)
  • Modified Subsequent System Impact Availability (MSA): Negligible (N)
  • Safety (S): Not Defined (X)
  • Automatable (AU): Not Defined (X)
  • Recovery (R): Not Defined (X)
  • Value Density (V): Not Defined (X)
  • Vulnerability Response Effort (RE): Not Defined (X)
  • Provider Urgency (U): Not Defined (X)
  • Confidentiality Req. (CR): Not Defined (X)
  • Integrity Req. (IR): Not Defined (X)
  • Availability Req. (AR): Not Defined (X)
  • Exploit Maturity (E): Not Defined (X)
created 4 weeks ago Activity log
  • Created & dismissed (no matching packages found) suggestion 4 weeks ago
Arbitrary File Read via Improper Symlink Handling in USB HTTPS Access Path in multiple TP-Link Aginet Devices

The affected TP-Link Aginet devices do not properly validate symbolic links created on external USB storage devices. By placing a crafted symbolic link on supported storage media, an attacker may cause the system to resolve the link. Successful exploitation may allow unauthorized read access to sensitive files within the device filesystem.

References

Affected products

HB610(EU1)
  • <0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n
XX530v(EU1)
  • <0.3.0 3.1.10 v6107.0 Build 250425 Rel.71973n
XX530v(US1)
  • <0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n
EX220(BR) V2.0
  • <0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732n
EX220(RU) V1.0
  • <0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
EX222(KR) V1.0
  • <0.20.0 2.0.0 v609b.0 Build 260427 Rel.16915
EX520v(EU1)1.0
  • <0.1.0 3.0.0 v60ee.0 Build 250310 Rel.55637n
HB210(EU1) 1.0
  • <0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n
HB210(US2) 1.0
  • <0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n
HB610(CA) V2.0
  • <0.6.0 3.0.0 v60af.0 Build 251216 Rel.46954n
HB710(EU1) 1.0
  • <0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n
XX530v(BR)v1.0
  • <0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n
XX530v(BR)v2.0
  • <0.4.0 3.1.10 v60dc.0 Build 250520 Rel.69748n
EX220(US1) V1.0
  • <0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
EX222(EU1) V1.0
  • <0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
EX222(US1) V1.0
  • <0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
HB410( EU1) 1.0
  • <0.3.0 3.0.0 v60bf.0 Build 250901 Rel.45574n
HB810(EU1) V2.0
  • <0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567n
VX800v(DE) V1.0
  • <800.0.16
EB810v(EU1) V1.0
  • <0.6.0 3.0.0 v608b.0 Build 250613 Rel.10497n
EX820v(EU1) V1.0
  • <0.4.0 3.1.9 v6087.0 Build 250928 Rel.59674n
HB210 Pro(EU1)1.0
  • <0.5.0 3.0.0 v60d5.0 Build 250922 Rel.13742n
VX1800v(EU1) V1.0
  • <0.14.0 2.0.0 v6092.0 Build 250417 Rel.24761n
VX420-G2h(AU) V3.0
  • <0.2.0 2.0.0 v60df.0 Build 250427 Rel.38233n
HB610(US2) V2.6/2.0
  • <0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n
HB710(US2) V1.6/1.0
  • <0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n
EX220(EU1) V1.0/1.20
  • <0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
EX920(US2) V1.6/V1.0
  • <0.8.0 3.2.2 v6080.0 Build 260309 Rel.54790n
XC220-G3v(EU1) V2.30
  • <1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n
XC220-G3v(US1) V2.30
  • <1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n
HB210 Pro(US2)1.0/1.6
  • <0.8.0 3.0.0 v60d5.0 Build 260318 Rel.78363n
HB810(US2) V1.0/1.6/2.0/2.6
  • <0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188n
EX220(BR) V1.0/1.20/1.28/1.29/1.8
  • <0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n