CVE-2021-37289: Planex Mzk-DP150N Firmware

High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days.

Insecure Permissions in administration interface in Planex MZK-DP150N 1.42 and 1.43 allows attackers to execute system command as root via etc_ro/web/syscmd.asp.

Affected products

• Planex Mzk-DP150N Firmware: version 1.42 only; version 1.43 only

Published 2022-08-22. Last modified 2026-06-17.