Description
Use of Hard-Coded Credentials issue exists in MZK-DP300N version 1.07 and earlier, which may allow an attacker within the local network to log in to the affected device via Telnet and execute arbitrary commands.
Published: 2025-10-28
Score: 8.7 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 28 Oct 2025 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 28 Oct 2025 10:30:00 +0000

Type Values Removed Values Added
First Time appeared Planex
Planex mzk-dp300n
Vendors & Products Planex
Planex mzk-dp300n

Tue, 28 Oct 2025 05:00:00 +0000

Type Values Removed Values Added
Description Use of Hard-Coded Credentials issue exists in MZK-DP300N version 1.07 and earlier, which may allow an attacker within the local network to log in to the affected device via Telnet and execute arbitrary commands.
Weaknesses CWE-798
References
Metrics cvssV3_0

{'score': 8.8, 'vector': 'CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Planex Mzk-dp300n
cve-icon MITRE

Status: PUBLISHED

Assigner: jpcert

Published:

Updated: 2025-10-28T20:03:14.159Z

Reserved: 2025-10-22T09:51:31.094Z

Link: CVE-2025-62777

cve-icon Vulnrichment

Updated: 2025-10-28T20:03:09.514Z

cve-icon NVD

Status : Deferred

Published: 2025-10-28T05:15:48.750

Modified: 2026-04-15T00:35:42.020

Link: CVE-2025-62777

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2025-10-28T10:24:01Z

Weaknesses