CVE-2024-45372: Planex Mzk-DP300N Firmware

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

MZK-DP300N firmware versions 1.04 and earlier contains a cross-site request forger vulnerability. Viewing a malicious page while logging in to the web management page of the affected product may lead the user to perform unintended operations such as changing the login password, etc.

Affected products

• Planex Mzk-DP300N Firmware: up to and including 1.04

Published 2024-09-26. Last modified 2026-06-17.