CVE-2024-30220

2024-04-1510:44:02

jpcert

www.cve.org

cve-2024-30220

command injection

mzk-mf300n

firmware vulnerability

network-adjacent attack

AI Score

7.8

Confidence

High

EPSS

Percentile

9.0%

JSON

Command injection vulnerability in MZK-MF300N all firmware versions allows a network-adjacent unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port.

CNA Affected

[
  {
    "vendor": "PLANEX COMMUNICATIONS INC.",
    "product": "MZK-MF300N",
    "versions": [
      {
        "version": "all firmware versions",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/vu/JVNVU91975826/