CVE-2024-30220

EUVD-2024-28151
Command injection vulnerability in PLANEX COMMUNICATIONS wireless LAN routers allows a network-adjacent unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port. Note that MZK-MF300N is no longer supported, therefore the update for this product is not provided.
Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
ADJACENT_NETWORK
LOW
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 55%
Affected Products (NVD)
VendorProductVersion
planexmzk-mf300n_firmware
*
planexmzk-mf300hp2_firmware
𝑥
≤ 1.18
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
planexmzk-mf300n_firmware
𝑥
≤ *
ADP
Common Weakness Enumeration
References
https://jvn.jp/en/vu/JVNVU91975826/
https://jvn.jp/en/vu/JVNVU91975826/