Hard-Coded Credentials Vulnerability in MZK-DP300N by PLANEX
CVE-2025-62777

8.7HIGH

Key Information:

Vendor

Planex Communications Inc.

Status
Mzk-dp300n
Vendor
CVE Published:
28 October 2025

What is CVE-2025-62777?

The MZK-DP300N router has a vulnerability that stems from the use of hard-coded credentials. This security flaw enables an attacker with access to the local network to log into the device via Telnet, where they can execute arbitrary commands. This exposure places all connected networks at risk and necessitates immediate attention from users to secure their devices against potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

MZK-DP300N 1.07 and earlier

References

https://www.planex.co.jp/products/mzk-dp300n/
https://jvn.jp/en/jp/JVN00021602/

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

CVSS V3.0

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.