CVE-2023-26866
48Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 9.8epss 2.3%
from disclosure to weapon0 days
Published on NVDApr 4
1st PoCApr 1
exploitation probability
2.3%top 19% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
GreenPacket OH736's WR-1200 Indoor Unit, OT-235 with firmware versions M-IDU-1.6.0.3_V1.1 and MH-46360-2.0.3-R5-GP respectively are vulnerable to remote command injection. Commands are executed using pre-login execution and executed with root privileges allowing complete takeover.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/apublic PoCs found — 1
githubgithub.com/lionelmusonza/CVE-2023-26866★ 0⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.