<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: planex</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-45836: Cross-site scripting vulnerability exists in the web management page of PLANEX COMMUNICATIONS network cameras</title><link>https://patchthecve.com/cve/CVE-2024-45836.html</link><guid>https://patchthecve.com/cve/CVE-2024-45836.html</guid><pubDate>Wed, 17 Jun 2026 07:54:54 +0000</pubDate><description>MEDIUM 6.1: Cross-site scripting vulnerability exists in the web management page of PLANEX COMMUNICATIONS network cameras. If a logged-in user accesses a specific file, an arbitrary script may be executed on the web browser of the user.</description></item><item><title>CVE-2024-45372: MZK-DP300N firmware versions 1.04 and earlier contains a cross-site request forger vulnerability</title><link>https://patchthecve.com/cve/CVE-2024-45372.html</link><guid>https://patchthecve.com/cve/CVE-2024-45372.html</guid><pubDate>Wed, 17 Jun 2026 07:54:05 +0000</pubDate><description>MEDIUM 6.5: MZK-DP300N firmware versions 1.04 and earlier contains a cross-site request forger vulnerability. Viewing a malicious page while logging in to the web management page of the affected product may lead the user to perform unintended operations such as changing the login password, etc.</description></item><item><title>CVE-2024-30220: Command injection vulnerability in PLANEX COMMUNICATIONS wireless LAN routers allows a network-adjacent unauth</title><link>https://patchthecve.com/cve/CVE-2024-30220.html</link><guid>https://patchthecve.com/cve/CVE-2024-30220.html</guid><pubDate>Wed, 17 Jun 2026 07:26:30 +0000</pubDate><description>HIGH 8.8: Command injection vulnerability in PLANEX COMMUNICATIONS wireless LAN routers allows a network-adjacent unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port. Note that MZK-MF300N is no longer supported, therefore the update for this produc</description></item><item><title>CVE-2024-30219: Active debug code vulnerability exists in PLANEX COMMUNICATIONS wireless LAN routers</title><link>https://patchthecve.com/cve/CVE-2024-30219.html</link><guid>https://patchthecve.com/cve/CVE-2024-30219.html</guid><pubDate>Wed, 17 Jun 2026 07:26:30 +0000</pubDate><description>MEDIUM 6.8: Active debug code vulnerability exists in PLANEX COMMUNICATIONS wireless LAN routers. If a logged-in user who knows how to use the debug function accesses the device&#x27;s management page, an unintended operation may be performed. Note that MZK-MF300N is no longer supported, therefore the update for thi</description></item></channel></rss>