VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Apr 4, 2023· Updated Jun 17, 2026

CVE-2023-26866

CVE-2023-26866

Description

GreenPacket OH736's WR-1200 Indoor Unit, OT-235 with firmware versions M-IDU-1.6.0.3_V1.1 and MH-46360-2.0.3-R5-GP respectively are vulnerable to remote command injection. Commands are executed using pre-login execution and executed with root privileges allowing complete takeover.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Greenpacket/Ot 235 Firmware2 versions
    cpe:2.3:o:greenpacket:ot-235_firmware:m-idu-1.6.0.3_v1.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:greenpacket:ot-235_firmware:m-idu-1.6.0.3_v1.1:*:*:*:*:*:*:*
    • cpe:2.3:o:greenpacket:ot-235_firmware:mh-46360-2.0.3-r5-gp:*:*:*:*:*:*:*
  • Greenpacket/Wr 1200 Firmware
    cpe:2.3:o:greenpacket:wr-1200_firmware:m-idu-1.6.0.3_v1.1:*:*:*:*:*:*:*
  • GreenPacket/WR-1200 Indoor Unit, OT-235description
  • Greenpacket/WR-1200 Indoor Unitllm-fuzzy
    Range: = M-IDU-1.6.0.3_V1.1
  • Greenpacket/OT-235llm-fuzzy
    Range: = MH-46360-2.0.3-R5-GP

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.