Planex Communications INC. MZK Dp300N vulnerabilities

3 vulnerabilities

Known vulnerabilities in Planex Communications INC. MZK Dp300N, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.8CVE-2025-21603planex communications inc.mzk-dp300n
EPSS score
0.30%
Cross-site scripting vulnerability exists in MZK-DP300N firmware versions 1.05 and earlier. If an attacker logs in to the affected product and manipulates the device settings, an arbitrary script may be executed on the logged-in user's web browser when accessing a crafted URL.8.8CVE-2025-62777planex communications inc.mzk-dp300n
EPSS score
0.27%
Use of Hard-Coded Credentials issue exists in MZK-DP300N version 1.07 and earlier, which may allow an attacker within the local network to log in to the affected device via Telnet and execute arbitrary commands.6.5CVE-2024-45372planex communications inc.mzk-dp300n+1
EPSS score
0.19%
MZK-DP300N firmware versions 1.04 and earlier contains a cross-site request forger vulnerability. Viewing a malicious page while logging in to the web management page of the affected product may lead the user to perform unintended operations such as changing the login password, etc.