Command injection vulnerability in PLANEX COMMUNICATIONS wireless LAN routers allows a network-adjacent unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port. Note that MZK-MF300N is no longer supported, therefore the update for this product is not provided.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://jvn.jp/en/vu/JVNVU91975826/ | Third Party Advisory |
| https://jvn.jp/en/vu/JVNVU91975826/ | Third Party Advisory |
Configurations
History
30 Jun 2025, 14:22
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | ||
| References | () https://jvn.jp/en/vu/JVNVU91975826/ - Third Party Advisory | |
| First Time |
Planex mzk-mf300hp2 Firmware
Planex mzk-mf300n Firmware Planex mzk-mf300n Planex Planex mzk-mf300hp2 |
|
| CPE | cpe:2.3:h:planex:mzk-mf300n:-:*:*:*:*:*:*:* cpe:2.3:o:planex:mzk-mf300hp2_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:planex:mzk-mf300hp2:-:*:*:*:*:*:*:* cpe:2.3:o:planex:mzk-mf300n_firmware:*:*:*:*:*:*:*:* |
26 Feb 2025, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Command injection vulnerability in PLANEX COMMUNICATIONS wireless LAN routers allows a network-adjacent unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port. Note that MZK-MF300N is no longer supported, therefore the update for this product is not provided. | |
| CWE | CWE-77 CWE-78 |
15 Apr 2024, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-15 11:15
Updated : 2025-06-30 14:22
NVD link : CVE-2024-30220
Mitre link : CVE-2024-30220
JSON object : View
Products Affected
planex
- mzk-mf300hp2_firmware
- mzk-mf300hp2
- mzk-mf300n
- mzk-mf300n_firmware
CWE
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')
