CVE-2024-30220highCWE-77

CVE-2024-30220: high-severity vulnerability in PLANEX COMMUNICATIONS INC. MZK-MF300N

Published · Updated

Follow this CVE+ Monitor MZK-MF300HP2+ Monitor MZK-MF300N

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 1.0%
Command injection vulnerability in PLANEX COMMUNICATIONS wireless LAN routers allows a network-adjacent unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port. Note that MZK-MF300N is no longer supported, therefore the update for this product is not provided.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
PLANEX COMMUNICATIONS INC. · MZK-MF300HP2PLANEX COMMUNICATIONS INC. · MZK-MF300N
Related CVEs — PLANEX COMMUNICATIONS INC. MZK-MF300N

In the same product, most dangerous first.

CVE-2024-30219MEDIUMCVE-2024-30219EPSS 0.3%