high8.8
CVE-2024-30220
Command injection vulnerability in PLANEX COMMUNICATIONS wireless LAN routers allows a network-adjacent unauthenticated attacker to execute an arbitrary comman…
Impact
Command injection vulnerability in PLANEX COMMUNICATIONS wireless LAN routers allows a network-adjacent unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port. Note that MZK-MF300N is no longer supported, therefore the update for this product is not provided.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Planex | Mzk-Mf300n Firmware | All versions |
| Planex | Mzk-Mf300hp2 Firmware | through 1.18 |