CVE-2024-45372 — PLANEX COMMUNICATIONS INC. / MZK-DP300N

CVE-2024-45372

PLANEX COMMUNICATIONS INC. / MZK-DP300N PUBLISHED

Description (CNA)

MZK-DP300N firmware versions 1.04 and earlier contains a cross-site request forger vulnerability. Viewing a malicious page while logging in to the web management page of the affected product may lead the user to perform unintended operations such as changing the login password, etc.

Affected (CNA)

Vendor / product	Versions
PLANEX COMMUNICATIONS INC. / MZK-DP300N	affected firmware versions 1.04 and earlier

CWE

CWE-352

References

https://www.planex.co.jp/support/download/mzk-dp300n/
https://jvn.jp/en/jp/JVN81966868/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.