CVE-2024-45372mediumCWE-352

CVE-2024-45372: medium-severity vulnerability in PLANEX COMMUNICATIONS INC. MZK-DP300N

Published · Updated

Follow this CVE+ Monitor MZK-DP300N

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.2%
MZK-DP300N firmware versions 1.04 and earlier contains a cross-site request forger vulnerability. Viewing a malicious page while logging in to the web management page of the affected product may lead the user to perform unintended operations such as changing the login password, etc.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Affected products
PLANEX COMMUNICATIONS INC. · MZK-DP300N
Related CVEs — PLANEX COMMUNICATIONS INC. MZK-DP300N

In the same product, most dangerous first.

CVE-2025-21603MEDIUMCVE-2025-21603EPSS 0.3%CVE-2025-62777HIGHCVE-2025-62777EPSS 0.3%