Back to Database
Status published
High
CVE-2024-30220
Command injection vulnerability in PLANEX COMMUNICATIONS wireless LAN routers allows...
Vulnerability Description
Command injection vulnerability in PLANEX COMMUNICATIONS wireless LAN routers allows a network-adjacent unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port. Note that MZK-MF300N is no longer supported, therefore the update for this product is not provided.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-30220
Credits & Attribution
No credits recorded in the NVD database.
References
More from PLANEX COMMUNICATIONS INC.
View All →CVE-2025-62777
Use of Hard-Coded Credentials issue exists in MZK-DP300N version 1.07...
High
8.7
CVE-2025-21603
Cross-site scripting vulnerability exists in MZK-DP300N firmware versions 1.05 and...
Medium
4.8
CVE-2024-45836
Cross-site scripting vulnerability exists in the web management page of...
Unknown
0
CVE-2024-45372
MZK-DP300N firmware versions 1.04 and earlier contains a cross-site request...
Unknown
0
CVE-2024-30219
Active debug code vulnerability exists in PLANEX COMMUNICATIONS wireless LAN...
Medium
6.8
Affected Vendor
PLANEX COMMUNICATIONS INC.
View all reports →Affected Software
MZK-MF300N, MZK-MF300HP2
Vulnerable Versions:
all firmware versions, firmware versions 1.18 and earlier
Timeline
Official Publish:
April 15th, 2024
Last Modified:
August 27th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H