VULNERABILITY INTELLIGENCE

CVE-2024-45372

CVSS score6.5 MEDIUM
EPSS probability0.19%
CISA KEVNot currently listed
Published2024-09-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Description

MZK-DP300N firmware versions 1.04 and earlier contains a cross-site request forger vulnerability. Viewing a malicious page while logging in to the web management page of the affected product may lead the user to perform unintended operations such as changing the login password, etc.

Weakness classification

  • vultures@jpcert.or.jp: CWE-352
  • nvd@nist.gov: CWE-352

Primary references