CVE-2025-30238
Vulnérabilité élevée dans HB810(US2) V1.0/1.6/2.0/2.6 (TP-Link Systems Inc.)
CVSS 8.6 · Élevée
EPSS 0.2%
TP-Link Systems Inc.•HB810(US2) V1.0/1.6/2.0/2.6•Versions : <1.2.0 3.1.0 v609d.0 Build 260128 Rel.29711n, 0, <0.4.0 3.1.9 v6087.0 Build 250928 Rel.59674n, <0.8.0 3.0.0 v60d5.0 Build 260318 Rel.78363n, <0.6.0 3.0.0 v60af.0 Build 251216 Rel.46954n, <800.0.16, <0.5.0 3.1.10 v6075.0 Build 260511 Rel.47847n, <0.3.0 3.1.10 v6107.0 Build 250425 Rel.71973n, <0.20.0 2.0.0 v609b.0 Build 260427 Rel.16915, <0.4.0 3.1.10 v60dc.0 Build 250520 Rel.69748n, <0.6.0 3.0.0 v608b.0 Build 250613 Rel.10497n, <0.16.0 3.0.0 v6066.0 Build 250423 Rel.43799n, <0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732n, <0.18.0 2.0.0 v605f.0 Build 260304 Rel.45905n, <0.5.0 3.0.0 v60d5.0 Build 250922 Rel.13742n, <0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n, <0.7.0 3.0.0 v60b4.0 Build 251229 Rel.84306n, <0.8.0 3.2.2 v6080.0 Build 260309 Rel.54790n, <0.3.0 3.0.0 v60e3.0 Build 250925 Rel.66797n, <1.7.0 3.1.0 v608a.0 Build 250418 Rel.8257n, <1.8.0 3.1.0 v608a.0 Build 250425 Rel.40905n, <0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567n, <0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901n, <0.17.0 2.0.0 v605e.0 Build 250618 Rel.19329n, <0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n, <0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n, <0.9.0 3.0.0 v607e.0 Build 260520 Rel.33425n, <0.3.0 3.0.0 v60bf.0 Build 250901 Rel.45574n, <0.14.0 2.0.0 v6092.0 Build 250417 Rel.24761n, <0.1.0 3.0.0 v60ee.0 Build 250310 Rel.55637n, <1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n, <0.2.0 2.0.0 v60df.0 Build 250427 Rel.38233n, <0.18.0 2.0.0 v605e.0 Build 250827 Rel.37904n, <0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n, <0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n, <0.17.0 3.2.2 v6065.0 Build 260722 Rel.10662n, <0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188n, <0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n, <0.4.0 3.1.10 v6082.0 Build 260204 Rel.49460n, <0.8.0 3.0.0 v607e.0 Build 260424 Rel.27419n, <0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n
Description
In affected TP-Link Aginet devices, insufficient authorization validation allows authenticated low-privileged users to execute higher-privileged operations. An attacker may perform administrative actions such as creating privileged accounts or modifying critical configuration settings.
Gravité et risque d'exploitation
CVE-2025-30238 obtient un score CVSS de 8.6/10, soit une gravité élevée. Selon le modèle EPSS, la probabilité qu'elle soit exploitée dans les 30 prochains jours est de 0.20 %, ce qui la place devant 9.0 % des CVE référencées.
Que faire ?
- Vérifiez si HB810(US2) V1.0/1.6/2.0/2.6 (versions <1.2.0 3.1.0 v609d.0 Build 260128 Rel.29711n, 0, <0.4.0 3.1.9 v6087.0 Build 250928 Rel.59674n, <0.8.0 3.0.0 v60d5.0 Build 260318 Rel.78363n, <0.6.0 3.0.0 v60af.0 Build 251216 Rel.46954n, <800.0.16, <0.5.0 3.1.10 v6075.0 Build 260511 Rel.47847n, <0.3.0 3.1.10 v6107.0 Build 250425 Rel.71973n, <0.20.0 2.0.0 v609b.0 Build 260427 Rel.16915, <0.4.0 3.1.10 v60dc.0 Build 250520 Rel.69748n, <0.6.0 3.0.0 v608b.0 Build 250613 Rel.10497n, <0.16.0 3.0.0 v6066.0 Build 250423 Rel.43799n, <0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732n, <0.18.0 2.0.0 v605f.0 Build 260304 Rel.45905n, <0.5.0 3.0.0 v60d5.0 Build 250922 Rel.13742n, <0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n, <0.7.0 3.0.0 v60b4.0 Build 251229 Rel.84306n, <0.8.0 3.2.2 v6080.0 Build 260309 Rel.54790n, <0.3.0 3.0.0 v60e3.0 Build 250925 Rel.66797n, <1.7.0 3.1.0 v608a.0 Build 250418 Rel.8257n, <1.8.0 3.1.0 v608a.0 Build 250425 Rel.40905n, <0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567n, <0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901n, <0.17.0 2.0.0 v605e.0 Build 250618 Rel.19329n, <0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n, <0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n, <0.9.0 3.0.0 v607e.0 Build 260520 Rel.33425n, <0.3.0 3.0.0 v60bf.0 Build 250901 Rel.45574n, <0.14.0 2.0.0 v6092.0 Build 250417 Rel.24761n, <0.1.0 3.0.0 v60ee.0 Build 250310 Rel.55637n, <1.16.0 0.8.0 v6062.0 Build 250817 Rel.23310n, <0.2.0 2.0.0 v60df.0 Build 250427 Rel.38233n, <0.18.0 2.0.0 v605e.0 Build 250827 Rel.37904n, <0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n, <0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n, <0.17.0 3.2.2 v6065.0 Build 260722 Rel.10662n, <0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188n, <0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n, <0.4.0 3.1.10 v6082.0 Build 260204 Rel.49460n, <0.8.0 3.0.0 v607e.0 Build 260424 Rel.27419n, <0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n) est présent sur votre parc.
- Appliquez le correctif ou la version corrigée indiqués dans les références de l'éditeur.
- À défaut de correctif, limitez l'exposition (filtrage réseau, désactivation du composant).
- Automatisez la détection : les agents CVE Heimdall (gratuits, open source) corrèlent l'inventaire de vos serveurs avec la base CVE.