Planex Communications INC. vulnerabilities
11 vulnerabilities
Known vulnerabilities in Planex Communications INC. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 11 products.
Products
11- MZK Dp300N3 vulnerabilities
- Wired/Wireless LAN Pan/Tilt Network Camera CS Wmv02G3 vulnerabilities
- MZK Mf300Hp22 vulnerabilities
- MZK Mf300N2 vulnerabilities
- CS Qp50F ING21 vulnerabilities
- CS QR101 vulnerabilities
- CS QR201 vulnerabilities
- CS QR221 vulnerabilities
- CS Qr2201 vulnerabilities
- CS Qr3001 vulnerabilities
- Smacam CS QR10 And Smacam Night Vision CS QR201 vulnerabilities
CVE-2021-4468planex communications inc.cs-qp50f-ing2
EPSS score0.54%
PLANEX CS-QP50F-ING2 smart cameras expose a configuration backup interface over HTTP that does not require authentication. A remote, unauthenticated attacker can directly retrieve a compressed configuration backup file from the device. The backup contains sensitive configuration information, including credentials, allowing an attacker to obtain administrative access to the camera and compromise the confidentiality of the monitored environment.CVE-2025-21603planex communications inc.mzk-dp300nEPSS score0.30%
Cross-site scripting vulnerability exists in MZK-DP300N firmware versions 1.05 and earlier. If an attacker logs in to the affected product and manipulates the device settings, an arbitrary script may be executed on the logged-in user's web browser when accessing a crafted URL.CVE-2025-62777planex communications inc.mzk-dp300nEPSS score0.27%
Use of Hard-Coded Credentials issue exists in MZK-DP300N version 1.07 and earlier, which may allow an attacker within the local network to log in to the affected device via Telnet and execute arbitrary commands.CVE-2022-38399planex communications inc.smacam cs-qr10 and smacam night vision cs-qr20EPSS score0.37%
Missing protection mechanism for alternate hardware interface in SmaCam CS-QR10 all versions and SmaCam Night Vision CS-QR20 all versions allows an attacker to execute an arbitrary OS command by having the product connect to the product's specific serial connectionCVE-2024-45372planex communications inc.mzk-dp300n+1EPSS score0.19%
MZK-DP300N firmware versions 1.04 and earlier contains a cross-site request forger vulnerability. Viewing a malicious page while logging in to the web management page of the affected product may lead the user to perform unintended operations such as changing the login password, etc.CVE-2024-45836planex communications inc.cs-qr10+4EPSS score0.26%
Cross-site scripting vulnerability exists in the web management page of PLANEX COMMUNICATIONS network cameras. If a logged-in user accesses a specific file, an arbitrary script may be executed on the web browser of the user.CVE-2024-30219planex communications inc.mzk-mf300hp2+2EPSS score0.29%
Active debug code vulnerability exists in PLANEX COMMUNICATIONS wireless LAN routers. If a logged-in user who knows how to use the debug function accesses the device's management page, an unintended operation may be performed. Note that MZK-MF300N is no longer supported, therefore the update for this product is not provided.CVE-2024-30220planex communications inc.mzk-mf300hp2+2EPSS score1.01%
Command injection vulnerability in PLANEX COMMUNICATIONS wireless LAN routers allows a network-adjacent unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port. Note that MZK-MF300N is no longer supported, therefore the update for this product is not provided.CVE-2023-22375planex communications inc.wired/wireless lan pan/tilt network camera cs-wmv02gEPSS score0.36%
Cross-site request forgery (CSRF) vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a remote unauthenticated attacker to hijack the authentication and conduct arbitrary operations by having a logged-in user to view a malicious page. NOTE: This vulnerability only affects products that are no longer supported by the developer.CVE-2023-22370planex communications inc.wired/wireless lan pan/tilt network camera cs-wmv02gEPSS score0.29%
Stored cross-site scripting vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a network-adjacent authenticated attacker to inject an arbitrary script. NOTE: This vulnerability only affects products that are no longer supported by the developer.CVE-2023-22376planex communications inc.wired/wireless lan pan/tilt network camera cs-wmv02gEPSS score0.51%
Reflected cross-site scripting vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a remote unauthenticated attacker to inject arbitrary script to inject an arbitrary script. NOTE: This vulnerability only affects products that are no longer supported by the developer.