← CVE Intelligence

CVE-2024-30220

PLANEX COMMUNICATIONS INC. / MZK-MF300N PUBLISHED

Description (CNA)

Command injection vulnerability in PLANEX COMMUNICATIONS wireless LAN routers allows a network-adjacent unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port. Note that MZK-MF300N is no longer supported, therefore the update for this product is not provided.

Affected (CNA)

Vendor / productVersions
PLANEX COMMUNICATIONS INC. / MZK-MF300Naffected all firmware versions
PLANEX COMMUNICATIONS INC. / MZK-MF300HP2affected firmware versions 1.18 and earlier

CWE

CWE-77

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.