Description
Command injection vulnerability in PLANEX COMMUNICATIONS wireless LAN routers allows a network-adjacent unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port. Note that MZK-MF300N is no longer supported, therefore the update for this product is not provided.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PLANEX COMMUNICATIONS | MZK-MF300N | all firmware versions | — |
| PLANEX COMMUNICATIONS | MZK-MF300HP2 | firmware versions 1.18 and earlier | — |