CVE-2023-26866
Published Apr 4, 2023
Last updated 2 years ago
Overview
- Description
- GreenPacket OH736's WR-1200 Indoor Unit, OT-235 with firmware versions M-IDU-1.6.0.3_V1.1 and MH-46360-2.0.3-R5-GP respectively are vulnerable to remote command injection. Commands are executed using pre-login execution and executed with root privileges allowing complete takeover.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
Weaknesses
- nvd@nist.gov
- CWE-77
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:greenpacket:wr-1200:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "13725B7D-8B6B-49DB-A515-1078840AD967"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:greenpacket:wr-1200_firmware:m-idu-1.6.0.3_v1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9F69A52A-01CA-4791-B471-733961EDE20B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:greenpacket:ot-235:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4ECABF5E-5EAB-4D04-9BDB-284286FBD1D0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:greenpacket:ot-235_firmware:m-idu-1.6.0.3_v1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5B039D93-BD35-450C-A5D6-53BA29802806"
},
{
"criteria": "cpe:2.3:o:greenpacket:ot-235_firmware:mh-46360-2.0.3-r5-gp:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "427F138A-9616-4ADE-B9D2-69D65DC73F5C"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]