Planex
14 CVEs across 26 Planex products. Browse Planex vulnerabilities, severities, and proof-of-concept exploits.
Planex products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-45836 | Medium | 6.1 | 2024-09-26 | Cross-site scripting vulnerability exists in the web management page of PLANEX COMMUNICATIONS network cameras. If a logged-in user accesses a specific file, an… |
CVE-2024-45372 | Medium | 6.5 | 2024-09-26 | MZK-DP300N firmware versions 1.04 and earlier contains a cross-site request forger vulnerability. Viewing a malicious page while logging in to the web manageme… |
CVE-2024-30220 | High | 8.8 | 2024-04-15 | Command injection vulnerability in PLANEX COMMUNICATIONS wireless LAN routers allows a network-adjacent unauthenticated attacker to execute an arbitrary comman… |
CVE-2024-30219 | Medium | 6.8 | 2024-04-15 | Active debug code vulnerability exists in PLANEX COMMUNICATIONS wireless LAN routers. If a logged-in user who knows how to use the debug function accesses the… |
CVE-2023-22376 | Medium | 6.1 | 2023-02-14 | Reflected cross-site scripting vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a remote unauthenticated attacker to i… |
CVE-2023-22375 | High | 8.8 | 2023-02-14 | Cross-site request forgery (CSRF) vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a remote unauthenticated attacker t… |
CVE-2023-22370 | Medium | 5.2 | 2023-02-14 | Stored cross-site scripting vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a network-adjacent authenticated attacker… |
CVE-2022-38399 | Medium | 6.8 | 2022-09-08 | Missing protection mechanism for alternate hardware interface in SmaCam CS-QR10 all versions and SmaCam Night Vision CS-QR20 all versions allows an attacker to… |
CVE-2021-37289 | High | 7.2 | 2022-08-22 | Insecure Permissions in administration interface in Planex MZK-DP150N 1.42 and 1.43 allows attackers to execute system command as root via etc_ro/web/syscmd.as… |
CVE-2017-12577 | Critical | 9.8 | 2018-08-24 | An issue was discovered on the PLANEX CS-QR20 1.30. A hardcoded account / password ("admin:password") is used in the Android application that allows attackers… |
CVE-2017-12576 | High | 7.2 | 2018-08-24 | An issue was discovered on the PLANEX CS-QR20 1.30. A hidden and undocumented management page allows an attacker to execute arbitrary code on the device when t… |
CVE-2017-12574 | Critical | 9.8 | 2018-08-24 | An issue was discovered on PLANEX CS-W50HD devices with firmware before 030720. A hardcoded credential "supervisor:dangerous" was injected into web authenticat… |
CVE-2017-12573 | High | 8.8 | 2018-08-24 | An issue was discovered on PLANEX CS-W50HD devices with firmware before 030720. The device has a command-injection vulnerability in the web management UI on NA… |
CVE-2013-6026 | | 2013-10-19 | The web interface on D-Link DIR-100, DIR-120, DI-624S, DI-524UP, DI-604S, DI-604UP, DI-604+, and TM-G5240 routers; Planex BRL-04R, BRL-04UR, and BRL-04CW route… |