CVE-2025-62777 | THREATINT

Description

Use of Hard-Coded Credentials issue exists in MZK-DP300N version 1.07 and earlier, which may allow an attacker within the local network to log in to the affected device via Telnet and execute arbitrary commands.

PUBLISHED Reserved 2025-10-22 | Published 2025-10-28 | Updated 2025-10-28 | Assigner jpcert

HIGH: 8.8CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

HIGH: 8.7CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Problem types

Use of hard-coded credentials

Product status

1.07 and earlier

affected

References

www.planex.co.jp/products/mzk-dp300n/

jvn.jp/en/jp/JVN00021602/

cve.org (CVE-2025-62777)

nvd.nist.gov (CVE-2025-62777)

Download JSON