Priority MEDIUM 53
The web interface on D-Link DIR-100, DIR-120, DI-624S, DI-524UP, DI-604S, DI-604UP, DI-604+, and TM-G5240 routers; Planex BRL-04R, BRL-04UR, and BRL-04CW routers; and Alpha Networks routers allows remote attackers to byp…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.0768 · Published 2013-10-19 · No fix listed CWE-264
Priority MEDIUM 46
An issue was discovered on PLANEX CS-W50HD devices with firmware before 030720.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01795 · Published 2018-08-24 · No fix listed CWE-798
Priority MEDIUM 45
An issue was discovered on the PLANEX CS-QR20 1.30.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01455 · Published 2018-08-24 · No fix listed CWE-798
Priority MEDIUM 44
PLANEX CS-QP50F-ING2 smart cameras expose a configuration backup interface over HTTP that does not require authentication.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00537 · Published 2025-11-14 · No fix listed CWE-306
Priority MEDIUM 44
An issue was discovered on PLANEX CS-W50HD devices with firmware before 030720.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0314 · Published 2018-08-24 · No fix listed
Priority MEDIUM 42
Command injection vulnerability in PLANEX COMMUNICATIONS wireless LAN routers allows a network-adjacent unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.01013 · Published 2024-04-15 · No fix listed CWE-77
Priority MEDIUM 40
Cross-site request forgery (CSRF) vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a remote unauthenticated attacker to hijack the authentication and conduct arbitrary operations…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00364 · Published 2023-02-14 · No fix listed CWE-352
Priority LOW 39
Use of Hard-Coded Credentials issue exists in MZK-DP300N version 1.07 and earlier, which may allow an attacker within the local network to log in to the affected device via Telnet and execute arbitrary commands.
CVSS 4.0HIGH 8.7· Adjacent network · No auth · No interaction · EPSS 0.00272 · Published 2025-10-28 · No fix listed CWE-798
Priority LOW 36
An issue was discovered on the PLANEX CS-QR20 1.30.
CVSS 3.0HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02198 · Published 2018-08-24 · No fix listed CWE-668
Priority LOW 35
Insecure Permissions in administration interface in Planex MZK-DP150N 1.42 and 1.43 allows attackers to execute system command as root via etc_ro/web/syscmd.asp.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01763 · Published 2022-08-22 · No fix listed CWE-276
Priority LOW 32
Active debug code vulnerability exists in PLANEX COMMUNICATIONS wireless LAN routers.
CVSS 3.1MEDIUM 6.8· Adjacent network · High privileges · No interaction · EPSS 0.00291 · Published 2024-04-15 · No fix listed CWE-489
Priority LOW 30
Missing protection mechanism for alternate hardware interface in SmaCam CS-QR10 all versions and SmaCam Night Vision CS-QR20 all versions allows an attacker to execute an arbitrary OS command by having the product connec…
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00393 · Published 2022-09-08 · No fix listed CWE-287
Priority LOW 28
MZK-DP300N firmware versions 1.04 and earlier contains a cross-site request forger vulnerability.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00186 · Published 2024-09-26 · No fix listed CWE-352
Priority LOW 28
Reflected cross-site scripting vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a remote unauthenticated attacker to inject arbitrary script to inject an arbitrary script.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00508 · Published 2023-02-14 · No fix listed CWE-79
Priority LOW 27
Cross-site scripting vulnerability exists in the web management page of PLANEX COMMUNICATIONS network cameras.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00258 · Published 2024-09-26 · No fix listed CWE-79
Priority LOW 23
Stored cross-site scripting vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a network-adjacent authenticated attacker to inject an arbitrary script.
CVSS 3.1MEDIUM 5.2· Adjacent network · No auth · User interaction · EPSS 0.00293 · Published 2023-02-14 · No fix listed CWE-79
Priority LOW 22
Cross-site scripting vulnerability exists in MZK-DP300N firmware versions 1.05 and earlier.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00303 · Published 2025-01-08 · No fix listed CWE-79