Back to Database
Status published
Medium
CVE-2025-21603
Cross-site scripting vulnerability exists in MZK-DP300N firmware versions 1.05 and...
Vulnerability Description
Cross-site scripting vulnerability exists in MZK-DP300N firmware versions 1.05 and earlier. If an attacker logs in to the affected product and manipulates the device settings, an arbitrary script may be executed on the logged-in user's web browser when accessing a crafted URL.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-21603
Credits & Attribution
No credits recorded in the NVD database.
More from PLANEX COMMUNICATIONS INC.
View All →CVE-2025-62777
Use of Hard-Coded Credentials issue exists in MZK-DP300N version 1.07...
High
8.7
CVE-2024-45836
Cross-site scripting vulnerability exists in the web management page of...
Unknown
0
CVE-2024-45372
MZK-DP300N firmware versions 1.04 and earlier contains a cross-site request...
Unknown
0
CVE-2024-30220
Command injection vulnerability in PLANEX COMMUNICATIONS wireless LAN routers allows...
High
8.8
CVE-2024-30219
Active debug code vulnerability exists in PLANEX COMMUNICATIONS wireless LAN...
Medium
6.8
Affected Vendor
PLANEX COMMUNICATIONS INC.
View all reports →Affected Software
MZK-DP300N
Vulnerable Versions:
firmware versions 1.05 and earlier
Timeline
Official Publish:
January 8th, 2025
Last Modified:
January 8th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N