Command injection vulnerability in MZK-MF300N all firmware versions allows a network-adjacent unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port.
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')