漏洞概述 TP-Link ISP管理的网络设备存在多个安全漏洞，包括： 1. CVE-2025-30237：通过Web服务器中的Broken Access Control绕过身份验证。 2. CVE-2025-30238：通过用户管理中的Improper Authorization实现权限提升。 3. CVE-2025-30239：由于硬编码的加密密钥导致敏感数据泄露。 4. CVE-2025-30240：通过USB HTTPS访问路径中的Improper Symlink Handling实现任意文件读取。 5. CVE-2025-30241：通过Web界面中的OS Command Injection实现操作系统命令注入。 影响范围 受影响的设备包括多个系列的TP-Link ISP管理网络设备，具体型号和版本如下： Mesh: HB Series - HB610(US2) V1.0/1.6/2.0/2.6 - HB610(EU1) V2.0 - HB710(US2) V1.6/1.0 - HB610(US2) V2.6/2.0 - HB610(EU1) - HB610(CA) V2.0 - HB410(EU1) 1.0 - HB210(US2) 1.0 - HB210(EU1) 1.0 - HB210 Pro(EU1) 1.0 - HB210 Pro(US2) 1.0/1.6 Mesh: HX Series - HX510(US1) V2.0 - HX510(EU1) V2.0 - HX510(CA) V1.0/2.0 - HX510(AU) V1.9/2.0 - HX510(US2) 2.6 - HK710(EU1) V1.0 - HK710 Pro(EU1) V1.0 - HK220(US1) V1.0/1.0 - HK220(EU1) V1.0 - HK220(CA) V1.0 - HK220(AU) V1.0 - HK141(EU1) V1.0 Mesh: HC Series - HC220-G5(EU1) V1.0/1.6 - HC220-G5(EU1) V1.20/1.0 - HC220-G5(BR) V1.30 Router: EB Series - EB210 Pro(EU1) 1.0 - EB210 Pro(US1) 1.0 - EB810(EU1) V1.0 Router: EC Series - EC220-G5(BR) V3.0 - EC220-G5(EU1) V3.0 - EC220-G5(US1) V3.0 - EC225-G5(BR) V1.0 - EC225-G5(EU1) V1.0 - EC225-G5(US1) V1.0 Router: EX Series - EX141(BR) V1.0/1.9 - EX141(EU1) V1.0 - EX141(US1) V1.0 - EX220(BR) V1.0/1.20/1.28/1.29/1.8 - EX220(BR) V2.0 - EX220(EU1) V1.0/1.20 - EX220(RU) V1.0 - EX220(US1) V1.0 - EX222(EU1) V1.0 - EX222(RU) V1.0 - EX222(US1) V1.0 - EX511(BR) V2.0/2.8/2.9 - EX511(EU1) V2.0 - EX511(US1) V2.0 - EX520(US1) V1.0 - EX520v(EU1) V1.0 - EX521(US1) V1.0 - EX820v(EU1) V1.0 - EX920(US2) V1.6/V1.0 PON: XC Series - XC220-G3v(EU1) V2.30 修复方案 针对每个漏洞，TP-Link提供了相应的固件版本修复方案。具体修复版本如下： CVE-2025-30237 - HB610(US2) V1.0/1.6/2.0/2.6: 0.3.0.3.2.2 v6095.0 Build 250717 Rel.67188n - HB610(EU1) V2.0: 0.10.0.3.2.2 v6095.0 Build 250395 Rel.47567n - HB710(US2) V1.6/1.0: 0.3.0.3.0.0 v60be.0 Build 251128 Rel.43956n - HB610(US2) V2.6/2.0: 0.6.0.3.0.0 v604f.0 Build 251204 Rel.20362n - HB610(EU1): 0.6.0.3.0.0 v604f.0 Build 251204 Rel.20362n - HB610(CA) V2.0: 0.6.0.3.0.0 v604f.0 Build 251216 Rel.46954n - HB410(EU1) 1.0: 0.3.0.3.0.0 v60be.0 Build 250901 Rel.45574n - HB210(US2) 1.0: 0.2.0.3.0.0 v609f.0 Build 250826 Rel.47715n - HB210(EU1) 1.0: 0.2.0.3.0.0 v609f.0 Build 250826 Rel.47715n - HB210 Pro(EU1) 1.0: 0.5.0.3.0.0 v60e5.0 Build 250922 Rel.13742n - HB210 Pro(US2) 1.0/1.6: 0.8.0.3.0.0 v60e5.0 Build 260316 Rel.78363n CVE-2025-30238 - HB610(US2) V1.0/1.6/2.0/2.6: 0.3.0.3.2.2 v6095.0 Build 250717 Rel.67188n - HB610(EU1) V2.0: 0.10.0.3.2.2 v6095.0 Build 250395 Rel.47567n - HB710(US2) V1.6/1.0: 0.3.0.3.0.0 v60be.0 Build 251128 Rel.43956n - HB610(US2) V2.6/2.0: 0.6.0.3.0.0 v604f.0 Build 251204 Rel.20362n - HB610(EU1): 0.6.0.3.0.0 v604f.0 Build 251204 Rel.20362n - HB610(CA) V2.0: 0.6.0.3.0.0 v604f.0 Build 251216 Rel.46954n - HB410(EU1) 1.0: 0.3.0.3.0.0 v60be.0 Build 250901 Rel.45574n - HB210(US2) 1.0: 0.2.0.3.0.0 v609f.0 Build 250826 Rel.47715n - HB210(EU1) 1.0: 0.2.0.3.0.0 v609f.0 Build 250826 Rel.47715n - HB210 Pro(EU1) 1.0: 0.5.0.3.0.0 v60e5.0 Build 250922 Rel.13742n - HB210 Pro(US2) 1.0/1.6: 0.8.0.3.0.0 v60e5.0 Build 260316 Rel.78363n CVE-2025-30239 - HB610(US2) V1.0/1.6/2.0/2.6: 0.3.0.3.2.2 v6095.0 Build 250717 Rel.67188n - HB610(EU1) V2.0: 0.10.0.3.2.2 v6095.0 Build 250395 Rel.47567n - HB710(US2) V1.6/1.0: 0.3.0.3.0.0 v60be.0 Build 251128 Rel.43956n - HB610(US2) V2.6/2.0: 0.6.0.3.0.0 v604f.0 Build 251204 Rel.20362n - HB610(EU1): 0.6.0.3.0.0 v604f.0 Build 251204 Rel.20362n - HB610(CA) V2.0: 0.6.0.3.0.0 v604f.0 Build 251216 Rel.46954n - HB410(EU1) 1.0: 0.3.0.3.0.0 v60be.0 Build 250901 Rel.45574n - HB210(US2) 1.0: 0.2.0.3.0.0 v609f.0 Build 250826 Rel.47715n - HB210(EU1) 1.0: 0.2.0.3.0.0 v609f.0 Build 250826 Rel.47715n - HB210 Pro(EU1) 1.0: 0.5.0.3.0.0 v60e5.0 Build 250922 Rel.13742n - HB210 Pro(US2) 1.0/1.6: 0.8.0.3.0.0 v60e5.0 Build 260316 Rel.78363n CVE-2025-30240 - HB610(US2) V1.0/1.6/2.0/2.6: 0.3.0.3.2.2 v6095.0 Build 250717 Rel.67188n - HB610(EU1) V2.0: 0.10.0.3.2.2 v6095.0 Build 250395 Rel.47567n - HB710(US2) V1.6/1.0: 0.3.0.3.0.0 v60be.0 Build 251128 Rel.43956n - HB610(US2) V2.6/2.0: 0.6.0.3.0.0 v604f.0 Build 251204 Rel.20362n - HB610(EU1): 0.6.0.3.0.0 v604f.0 Build 251204 Rel.20362n - HB610(CA) V2.0: 0.6.0.3.0.0 v604f.0 Build 251216 Rel.46954n - HB410(EU1) 1.0: 0.3.0.3.0.0 v60be.0 Build 250901 Rel.45574n - HB210(US2) 1.0: 0.2.0.3.0.0 v609f.0 Build 250826 Rel.47715n - HB210(EU1) 1.0: 0.2.0.3.0.0 v609f.0 Build 250826 Rel.47715n - HB210 Pro(EU1) 1.0: 0.5.0.3.0.0 v60e5.0 Build 250922 Rel.13742n - HB210 Pro(US2) 1.0/1.6: 0.8.0.3.0.0 v60e5.0 Build 260316 Rel.78363n CVE-2025-30241 - HB610(US2) V1.0/1.6/2.0/2.6: 0.3.0.3.2.2 v6095.0 Build 250717 Rel.67188n - HB610(EU1) V2.0: 0.10.0.3.2.2 v6095.0 Build 250395 Rel.47567n - HB710(US2) V1.6/1.0: 0.3.0.3.0.0 v60be.0 Build 251128 Rel.43956n - HB610(US2) V2.6/2.0: 0.6.0.3.0.0 v604f.0 Build 251204 Rel.20362n - HB610(EU1): 0.6.0.3.0.0 v604f.0 Build 251204 Rel.20362n - HB610(CA) V2.0: 0.6.0.3.0.0 v604f.0 Build 251216 Rel.46954n - HB410(EU1) 1.0: 0.3.0.3.0.0 v60be.0 Build