What is the official website of Santander Uruguay ?

The official website of Santander Uruguay is https://www.santander.com.uy/.

What is Santander Uruguay's cybersecurity risk score?

Santander Uruguay has an AI-generated cybersecurity risk score of 756 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Santander Uruguay experienced?

According to Rankiteo, Santander Uruguay currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Santander Uruguay been affected by any supply chain cyber incidents ?

According to Rankiteo, Santander Uruguay has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Snowflake (Incident ID: BANSNOTIC1771979968) Snowflake (Incident ID: 23A1764346412) Snowflake (Incident ID: SNO000110624) Snowflake (Incident ID: ATT4392343111325)

Does Santander Uruguay have SOC 2 Type 1 certification ?

According to Rankiteo, Santander Uruguay is not certified under SOC 2 Type 1.

Does Santander Uruguay have SOC 2 Type 2 certification ?

According to Rankiteo, Santander Uruguay does not hold a SOC 2 Type 2 certification.

Does Santander Uruguay comply with GDPR ?

According to Rankiteo, Santander Uruguay is not listed as GDPR compliant.

Does Santander Uruguay have PCI DSS certification ?

According to Rankiteo, Santander Uruguay does not currently maintain PCI DSS compliance.

Does Santander Uruguay comply with HIPAA ?

According to Rankiteo, Santander Uruguay is not compliant with HIPAA regulations.

Does Santander Uruguay have ISO 27001 certification ?

According to Rankiteo,Santander Uruguay is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Santander Uruguay operate in ?

Santander Uruguay operates primarily in the Banking industry.

How many employees does Santander Uruguay have ?

Santander Uruguay employs approximately 263 people worldwide.

Does Santander Uruguay own any subsidiaries ?

Santander Uruguay presently has no subsidiaries across any sectors.

How many LinkedIn followers does Santander Uruguay have ?

Santander Uruguay's official LinkedIn profile has approximately 60,800 followers.

What is the NAICS classification code for Santander Uruguay ?

Santander Uruguay is classified under the NAICS code 52211, which corresponds to Commercial Banking.

Does Santander Uruguay have a Crunchbase profile ?

No, Santander Uruguay does not have a profile on Crunchbase.

Does Santander Uruguay have a LinkedIn profile ?

Yes, Santander Uruguay maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/bancosantanderuruguay.

How many cybersecurity incidents has Santander Uruguay experienced ?

As of August 11, 2026, Rankiteo reports that Santander Uruguay has experienced 5 cybersecurity incidents.

How many peer or competitor companies does Santander Uruguay have ?

Santander Uruguay has an estimated 7,461 peer or competitor companies worldwide.

What types of cybersecurity incidents has Santander Uruguay faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Santander Uruguay

Boost Score +25 with badge (5 left)

756

/1000

Fair

781

/1000

Fair

Santander Uruguay Vendor Cyber Rating & Cyber Score

santander.com.uy

Add Your Compliance Badge

Somos el equipo de Santander Uruguay. Aquí buscamos construir todos los días el mejor lugar para trabajar, actuando de manera responsable, comprometidos con el progreso de las personas y de las empresas. En este espacio podrás encontrar todas nuestras novedades, mensajes de nuestros líderes y tips de carrera. Te invitamos a seguir construyendo juntos, el #EfectoSantander.

Santander Uruguay A.I CyberSecurity Scoring

Scoring History

Santander Uruguay

Santander Uruguay CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Santander

Breach

5/2026

METORATICBANYAH...

Santander

Breach

2/2026

Snowflake

BANSNOTIC177197...

Santander

Breach

11/2025

Snowflake

23A1764346412

Santander

Breach

100

11/2024

Snowflake

SNO000110624

Santander

Breach

7/2024

Snowflake

ATT439234311132...

Loading…

A.I.

Santander Uruguay Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Santander Uruguay

Incidents vs Banking Industry Avg (This Year)

No incidents recorded for Santander Uruguay in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Santander Uruguay in 2026.

Incident Types Santander Uruguay vs Banking Industry Avg (This Year)

No incidents recorded for Santander Uruguay in 2026.

Incident History - Santander Uruguay (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Santander Uruguay Subsidiaries

Santander Uruguay

Banking

Website: https://www.santander.com.uy/

Company Size: 501-1,000 employees

SantanderBanking

Santander BrasilBanking

Santander ArgentinaBanking

Santander MéxicoBanking

Santander ChileBanking

Santander Advance ChileBanking

Santander Bank, N.A.Banking

Santander UKBanking

Santander UK Corporate & CommercialBanking

Santander UK Business BankingBanking

Santander UK UniversitiesBanking

Santander PortugalBanking

OpenbankBanking

Santander EspañaBanking

Santander Empresas EspañaBanking

Santander Bank PolskaBanking

Santander Consumer USAFinancial Services

Santander Digital ServicesIT Services and IT Consulting

Geoban SAFinancial Services

Santander Private Banking InternationalBanking

ISBANInformation Technology & Services

PagoNxt DevelopersServicios financieros

Santander MultinationalsBanking

Elevate SantanderHigher Education

Loading…

Santander Uruguay Similar Companies

ING

ing.com

ING is a pioneer in digital banking and on the forefront as one of the most innovative banks in the world. As ING, we have a clear purpose that represents our conviction of people’s potential. We don’t judge, coach, or tell people how to live their lives. However big or small, modest or grand, we empower people and businesses to realise their vision for a better future. We made the promise to make banking frictionless, removing barriers to progress, and make people confident in their financial decisions. As a global bank we have a huge opportunity – and responsibility – to make an impact for the better. We can play a role by financing change, sharing knowledge, and innovating. Being sustainable is in all the choices we make—as a lender, as a partner and through the services we offer our customers

UBL - United Bank Limited

ubldigital.com

On 7 November 1959, UBL’s first branch at II Chundrigar Road in Karachi was inaugurated and with it launched a culture of service, innovation and financial excellence in Pakistan. A banking company incorporated in Pakistan and engaged in commercial banking and related services, UBL operates one of the largest branch networks in Pakistan, augmented by its industry leading digital banking services which have earned it local and international recognition. Aiming to being the undisputed leader in financial services for our customers as well as the most innovative and fastest growing bank in targeted businesses, UBL is dedicated to its customers, stakeholders, its diverse team and the communities it operates in. VIS Credit Rating Company ltd. (VIS) has reaffirmed the entity ratings of UBL at ‘AAA/A-1+’ (Triple A / A-One Plus). The Bank is listed in Pakistan, with its Global Depository Receipts (GDRs) on the list of the UK Listing Authority and London Stock Exchange Professional Securities Market. It is a subsidiary of Bestway (Holdings) Limited which is incorporated in the United Kingdom. About Bestway Group Bestway Group is a diversified multinational family-owned business and the largest overseas investor in Pakistan. Bestway Group was founded in 1976 by Sir Anwar Pervez OBE HPk, who remains Chairman. Serving over 12 million customers and employing over 28,000 individuals, the Group supports and serves communities through its operations across the UK, Pakistan and the Middle East. UBL is one of the 6 subsidiaries of the Bestway Group which also contains Bestway Wholesale, Well Pharmacy, Real Estate, Bestway Cement Limited and Bestway Foundation.

PT Bank Mandiri (Persero) Tbk.

bankmandiri.co.id

Bank Mandiri was established on 2 October 1998, as part of the bank restructuring program of the Government of Indonesia. In July 1999, four state-owned banks - Bank Bumi Daya, Bank Dagang Negara, Bank Exim and Bapindo - were amalgamated into Bank Mandiri. The history of these four banks can be traced back to over 140 years, and together they had contributed to the beginning of the Indonesian banking sector. We are continuously seeking mutually beneficial business opportunities that create synergies, building alliances and strengthening our supporting businesses with and through our subsidiaries, notably Bank Syariah Mandiri in Islamic banking, PT. Bank Mandiri Taspen in banking, Mandiri Europe in international banking, AXA Mandiri Financial Services in insurance, Mandiri Sekuritas in investment banking, Mandiri Capital Indonesia in venture capital, Mandiri Tunas Finance in multi-finance, Mandiri Utama Finance in multi-finance, and Mandiri International Remittance in remittance. With various subsidiaries that support our businesses, we have further strengthened our position as a prominent financial holdings institution in Indonesia.

OCBC

ocbc.com

OCBC is the longest established Singapore bank, formed in 1932 from the merger of three local banks, the oldest of which was founded in 1912. It is now the second largest financial services group in Southeast Asia by assets and one of the world’s most highly-rated banks, with an Aa1 rating from Moody’s. Recognised for its financial strength and stability, OCBC is consistently ranked among the World’s Top 50 Safest Banks by Global Finance and has been named Best Managed Bank in Singapore by The Asian Banker. OCBC and its subsidiaries offer a broad array of commercial banking, specialist financial and wealth management services, ranging from consumer, corporate, investment, private and transaction banking to treasury, insurance, asset management and stockbroking services. OCBC’s key markets are Singapore, Malaysia, Indonesia and Greater China. It has more than 570 branches and representative offices in 19 countries and regions. These include about 300 branches and offices in Indonesia under subsidiary Bank OCBC NISP, and over 90 branches and offices in Mainland China, Hong Kong SAR and Macau SAR under OCBC Wing Hang. OCBC’s private banking services are provided by its wholly-owned subsidiary Bank of Singapore, which operates on a unique open-architecture product platform to source for the best-in-class products to meet its clients’ goals. OCBC's insurance subsidiary, Great Eastern Holdings, is the oldest and most established life insurance group in Singapore and Malaysia. Its asset management subsidiary, Lion Global Investors, is one of the largest private sector asset management companies in Southeast Asia.

Intesa Sanpaolo

intesasanpaolo.com

Intesa Sanpaolo è il maggior gruppo bancario in Italia con una significativa presenza internazionale. Il suo business model distintivo la rende leader a livello europeo nel Wealth Management, Protection & Advisory e ne caratterizza l’orientamento al digitale. I’impegno in ambito ESG prevede, entro il 2025, €115 miliardi di finanziamenti impact e contributi per 500 milioni a supporto delle persone in difficoltà. Gallerie d’Italia, è la sede espositiva del patrimonio artistico della banca e di progetti artistici di riconosciuto valore. https://group.intesasanpaolo.com/it/ _______________ Intesa Sanpaolo is the largest banking group in Italy with a significant international presence. Its distinctive business model makes it a European leader in wealth management, protection and advisory and ensures its strong focus on digital. Its commitment to ESG foresees, by 2025, €115 billion of impact financing and contributions of €500 million to support people in need. Gallerie d'Italia, is the exhibition venue for the bank's artistic heritage and artistic projects of recognised value. https://group.intesasanpaolo.com/en/ _________________ Sede Legale: Piazza San Carlo 156, 10121 Torino – Sede Secondaria: Via Monte di Pietà 8, 20121 Milano Tel. 011 555.1 – mail: [email protected] pec: [email protected] Registro delle Imprese di Torino e Codice Fiscale 00799960158 – Partita Iva 10810700152 N. Iscr. Albo Banche 5361 N. Iscr. Registro degli Intermediari Assicurativi e Riassicurativi - Sez. D. 000027210, data di iscrizione 01.02.2007 - Intermediario soggetto alla vigilanza dell'IVASS: https://servizi.ivass.it/RuirPubblica Per la presentazione dei reclami e eventuali sistemi di risoluzione delle controversie https://www.intesasanpaolo.com/it/persone-e-famiglie/reclami.html. Per assistenza: https://www.intesasanpaolo.com/it/common/parla-con-noi.html. Netiquette: https://www.intesasanpaolo.com/it/common/landing/anti-phishing/netiquette.html

HBL

hbl.com

HBL, Pakistan’s leading Bank, was the first commercial Bank to be established in Pakistan in 1947. Over the years, HBL has grown its branch network and maintained its position as the largest private sector Bank in Pakistan with over 1,728+ branches and 2,300+ ATMs globally, serving 37million+ clients worldwide. HBL will never ask for customer's personal data on public platforms. Please avoid sharing such data via social media.

MCB Bank Limited

mcb.com.pk

Welcome to the Official LinkedIn page of MCB Bank Limited. Established in 1947, MCB Bank Limited is one of the largest Banks in Pakistan with a total customer base exceeding 7 million. We have products and services to suit the every need of customers. To learn more about MCB Bank, please visit our website www.mcb.com.pk or call the MCB Contact Center 111-000-622. Disclaimer: MCB Bank will never ask for our customer’s personal data on any public platform. Please avoid sharing any such data via social media.

Axis Bank

axisbank.com

Axis Bank is the third largest private sector bank in India. The Bank offers the entire spectrum of financial services to customer segments covering Large and Mid-Corporates, MSME, Agriculture and Retail Businesses. The Bank has a large footprint of 5000 domestic branches (including extension counters) with 15,751 ATMs & cash recyclers spread across the country. The Bank has 6 Axis Virtual Centres with over 1,500 Virtual Relationship Managers as on 31st March 2023. The Overseas operations of the Bank are spread over eight international offices with branches in Singapore, Dubai (at DIFC), and Gift City-IBU; representative offices in Dhaka, Dubai, Abu Dhabi, Sharjah and an overseas subsidiary in London, UK. The international offices focus on Corporate Lending, Coverage Business, Trade Finance, Syndication, Investment Banking, Liability Businesses, and Private Banking/Wealth Management offerings. Axis Bank is one of the first new generation private sector banks to have begun operations in 1994. The Bank was promoted in 1993, jointly by Specified Undertaking of Unit Trust of India (SUUTI) (then known as Unit Trust of India), Life Insurance Corporation of India (LIC), General Insurance Corporation of India (GIC), National Insurance Company Ltd. (NIC), The New India Assurance Company Ltd. (NIA), The Oriental Insurance Company Ltd. (OIC), and United India Insurance Company Ltd. (UIIC). The shareholding of Unit Trust of India was subsequently transferred to SUUTI, an entity established in 2003. GIC, NIC, NIA, OIC, UIIC have been reclassified from promoter category to public category. As on March 31, 2023, SUUTI and LIC are the promoters of the Bank. With a balance sheet size of Rs. 13,17,326 crores as on 31st March 2023, Axis Bank has achieved consistent growth and with a 5-year CAGR (2017-18 to 2022-23) of 14% each in Total Assets & Advances and 16% in Deposits.

U.S. Bank

cb usbank.com

At U.S. Bank, we help millions of clients achieve their goals with a balance of best-in-class technology and human expertise tailored to individual needs. As the fifth-largest commercial bank in the United States, we’ve built a reputation for strength and stability across a diversified mix of businesses, including commercial and institutional banking, business banking, payments, wealth management and consumer banking. We’ve been named one of the World’s Most Ethical Companies® by the Ethisphere Institute and the most admired superregional bank by Fortune. In addition to thousands of branches serving consumers, U.S. Bank offers a complete suite of products, services and strategic partnerships for business. Within our Wealth, Corporate, Commercial and Institutional Banking division, we serve more than half a million clients across the country and around the world, ranging from wealthy individuals and families to the largest corporations, including 90% of Fortune 1000 companies. We’re also consistently recognized as a great place to work. We’re shaping our company culture with intention, focused on creating a workplace where it’s safe to speak up, share ideas and try new things. We’re proud to be recognized as a “Best for Vets” employer by the Military Times and included on Fair360’s (formerly DiversityInc.) list of Top 50 Companies for Diversity. U.S. Bank, NA. Member FDIC. Equal Housing Lender.

Loading…

NEWS

Santander Uruguay CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

September 06, 2025 07:00 AM

Bank Hacking Has Doubled Since 2023 And Investors Are Getting Spooked

Financial institutions are navigating a growing cybersecurity minefield, with data breaches doubling since 2023 and increasingly affecting a...

Read Article

June 11, 2025 07:00 AM

Obvious passwords: The focus of our latest global cybersecurity awareness campaign

Discover the initiatives we've been carrying out to mark Password Month in the countries where we operate.

Read Article

April 01, 2025 07:00 AM

Strike raises $13.5M Series A led by FinTech Collective

Uruguayan cybersecurity startup Strike raised a $13.5M Series A round led by FinTech Collective. Galicia Ventures, Greyhound Capital,...

Read Article

March 28, 2025 07:00 AM

Inicio Funding Uruguay cybersec startup Strike closes $13.5 million Series A round

Strike, a cybersecurity company, closed a $13.5 million dollar Series A led by FinTech Collective, which included participation from Galicia...

Read Article

February 14, 2025 08:00 AM

Romance scam: what it is and how to catch it in time

A romance scam is a cyber crime committed on social networks and dating apps. Scammers create fake profiles to contact victims and gain their trust.

Read Article

February 12, 2025 08:00 AM

Santander's commitment to cybersecurity in a post-quantum cryptography world

At Santander, we recognize the significance of the advancement of quantum computing, and we are actively participating in a global movement...

Read Article

June 20, 2024 07:00 AM

Santander warns US employees bank account info stolen in third-party database hack

The bank previously issued a statement on May 14, warning that customers of Santander Chile, Uruguay and Spain were accessed in a third-party database hack.

Read Article

June 07, 2024 07:00 AM

Santander Faces Major Cyber Attack Compromising Millions of Customers’ Data

In May, Santander Bank faced a significant cybersecurity breach that affected millions of its customers and employees worldwide.

Read Article

June 03, 2024 07:00 AM

Hackers threaten to sell Santander customer details for $2M: report

The collective ShinyHunters, which claimed to be behind the Ticketmaster breach reported last week, said it stole information related to 30...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-8718

SUMMARY

tls_opt_dtls_peer_connection_id_value_get() in subsys/net/lib/sockets/sockets_tls.c, which handles getsockopt(SOL_TLS, TLS_DTLS_PEER_CID_VALUE), passed the caller-supplied optval directly to mbedtls_ssl_get_peer_cid() without verifying the buffer was at least MBEDTLS_SSL_CID_OUT_LEN_MAX (default 32) bytes. mbedtls_ssl_get_peer_cid() copies the peer-negotiated DTLS Connection ID (length 1..MBEDTLS_SSL_CID_OUT_LEN_MAX) into that buffer without a destination-size parameter, so a caller-supplied optlen smaller than the CID causes a write of up to 31 bytes past the buffer end. In CONFIG_USERSPACE builds the getsockopt syscall verifier (z_vrfy_zsock_getsockopt) bounce-buffers the user's optval into a kernel allocation of exactly optlen bytes (k_usermode_alloc_from_copy -> z_thread_malloc), so an unprivileged user thread that passes a small optlen on a connected DTLS socket with Connection ID enabled induces a kernel-heap buffer overflow, with the overflowing content being the remote peer's CID. The defect requires CONFIG_MBEDTLS_SSL_DTLS_CONNECTION_ID, an established DTLS session with a negotiated peer CID, and (for the kernel-crossing case) CONFIG_USERSPACE. Introduced when the TLS_DTLS_CID option was added (v3.5.0). The fix rejects callers whose optlen is below MBEDTLS_SSL_CID_OUT_LEN_MAX with -EINVAL.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: 8.4)

cvss3

Base Score: 8.4

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

Impact Score

5.8

Exploitability

REFERENCES

CVE-2026-48161

SUMMARY

react18-use is a React 19 use hook shim. Between 2026-05-19 01:07:01 and 2026-05-19 15:20:43, the default branch contained malicious commits 7b79148d1495a2505f9277da295a98cf176f4496 through 7b79148d1495a2505f9277da295a98cf176f4496 that executed remote attacker-controlled code on developer machines during `npm install`. The commits were removed by force-push, but local clones, forks, and direct-SHA URLs may still contain them, and `npm install` against an affected checkout will still execute the code today. The package was not published to npm. `src/install.js` was added and wired into the `postinstall` script. It fetched a JavaScript payload from an attacker-controlled HTTPS endpoint (configurable via an environment variable), disabled TLS verification, and evaluated the response as code with `require` available. Execution was deliberately skipped on CI and cloud/serverless environments, targeting developer workstations. The second-stage payload was attacker-hosted and cannot be reconstructed. Assume full compromise of anything reachable from a Node process with the user's permissions. Those who ran `npm install` against an affected checkout on a developer machine on or after 2026-05-19 01:07:01 should treat the machine as compromised, rotate every credential the machine could reach, audit account activity since 2026-05-19 01:07:01, and clean local clones.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: )

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/dai-shi/react18-use/security/advisories/GHSA-32xh-vg5f-64fm

CVE-2026-11812

SUMMARY

The UpdateHub management subsystem (subsys/mgmt/updatehub/updatehub.c) drives every update operation through a single file-scope ctx structure that holds the CoAP block context, payload buffer, status code, socket, and a one-element poll-fd array fds[1]. Access to ctx was not serialized, and prepare_fds() wrote ctx.fds[ctx.nfds] and incremented ctx.nfds with no bounds check. Two independent paths mutate ctx concurrently: the background autohandler running on the system workqueue, and user-triggered operations reached through the updatehub run shell command, direct API calls, or — since the operations are exposed as syscalls — userspace threads. When a second flow enters prepare_fds() while ctx.nfds is already 1, the write lands one element past the array; by struct layout it overlaps the adjacent ctx.sock/ctx.nfds members. More broadly, the unsynchronized sharing lets two flows interleave connection setup and teardown, double-closing a socket descriptor or scribbling the shared buffers. The result is corruption of the update subsystem's internal state and denial of service of the firmware-update path; the out-of-bounds write is contained within the ctx structure and there is no demonstrated path to memory outside it or to code execution. Triggering requires a local actor able to invoke update operations (or, with CONFIG_USERSPACE, an unprivileged userspace thread) and to win a timing race against the background handler; remote peers cannot control the race timing. The fix serializes the entry points with a mutex and adds a bounds check to prepare_fds().

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: 2.5)

cvss3

Base Score: 2.5

Complexity: HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

REFERENCES

CVE-2026-11811

SUMMARY

The UpdateHub over-the-air update client's start_coap_client() in subsys/mgmt/updatehub/updatehub.c leaks the CoAP/DTLS socket descriptor on its connection-setup failure paths. The shared error: cleanup gated socket closing on a ret > 0 flag, but ret was set to -1 immediately after the socket was created, so when zsock_setsockopt() (DTLS) or zsock_connect() subsequently failed the gate was false and cleanup_connection() was never called. The open descriptor in the global ctx.sock was then overwritten by the next attempt, permanently leaking it from the socket / net_context pool until reboot. The failing setup path is reached every time the OTA client tries to contact the UpdateHub server and the connection cannot be established — driven automatically by the periodic autohandler() poll (and on demand via the updatehub_probe()/updatehub_update() API or the updatehub run shell command). The DTLS handshake/connect outcome is influenceable by a network or on-path attacker who drops, resets, or otherwise disrupts traffic to the server, and also fails naturally whenever the server is unreachable. Each failed attempt permanently leaks one descriptor; once the shared socket pool is exhausted, networking degrades device-wide until the device is rebooted, a denial-of-service condition. Severity is low because the leak rate is bounded by the configured OTA poll interval (default once per 24 hours), the effect is gradual and recovered by reboot, and only builds with the UpdateHub client enabled are affected. There is no memory-corruption, information-disclosure, or authentication impact.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

2.2

REFERENCES

CVE-2025-30241

SUMMARY

Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input properly before passing it to system-level command execution functions. An authenticated adjacent attacker may inject specially crafted input to execute arbitrary operation system commands with elevated privileges. Successful exploitation may allow execution of arbitrary system commands, potentially leading to full device compromise.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: )

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://www.tp-link.com/us/support/faq/5239/

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…