Command injection vulnerability in PLANEX COMMUNICATIONS wireless LAN routers allows a network-adjacent unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port. Note that MZK-MF300N is no longer supported, therefore the update for this product is not provided.
References
| Link | Resource |
|---|---|
| https://jvn.jp/en/vu/JVNVU91975826/ | Third Party Advisory |
| https://jvn.jp/en/vu/JVNVU91975826/ | Third Party Advisory |
Configurations
History
30 Jun 2025, 14:22
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://jvn.jp/en/vu/JVNVU91975826/ - Third Party Advisory | |
| First Time |
Planex mzk-mf300hp2 Firmware
Planex mzk-mf300hp2 Planex Planex mzk-mf300n Planex mzk-mf300n Firmware |
|
| CPE | cpe:2.3:h:planex:mzk-mf300hp2:-:*:*:*:*:*:*:* cpe:2.3:h:planex:mzk-mf300n:-:*:*:*:*:*:*:* cpe:2.3:o:planex:mzk-mf300n_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:planex:mzk-mf300hp2_firmware:*:*:*:*:*:*:*:* |
26 Feb 2025, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-77 | |
| Summary | (en) Command injection vulnerability in PLANEX COMMUNICATIONS wireless LAN routers allows a network-adjacent unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port. Note that MZK-MF300N is no longer supported, therefore the update for this product is not provided. |
Information
Published : 2024-04-15 11:15
Updated : 2025-06-30 14:22
NVD link : CVE-2024-30220
Mitre link : CVE-2024-30220
CVE.ORG link : CVE-2024-30220
JSON object : View
Products Affected
planex
- mzk-mf300hp2
- mzk-mf300n_firmware
- mzk-mf300n
- mzk-mf300hp2_firmware