Command injection vulnerability in PLANEX COMMUNICATIONS wireless LAN routers allows a network-adjacent unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port. Note that MZK-MF300N is no longer supported, therefore the update for this product is not provided.
📦
mzk-mf300n
Vendor: planex
Actively Exploited
0
CISA KEV List
PoC / Exploits
0
Code Available
Total RCEs
1
Remote Access
Total CVEs
2
Total Indexed
Avg. EPSS
0.65%
Exploit Prob.
Security Vulnerability Index
Page 1 / 1
8.8
CVSS
CVE-2024-30220
RCE
Severity: HIGH
6.8
CVSS
Active debug code vulnerability exists in PLANEX COMMUNICATIONS wireless LAN routers. If a logged-in user who knows how to use the debug function accesses the device's management page, an unintended operation may be performed. Note that MZK-MF300N is no longer supported, therefore the update for this product is not provided.
Severity: MEDIUM