CVE-2023-26866

CVE-2023-26866 説明 GreenPacket OH736 の WR-1200 屋内ユニット、OT-235（ファームウェアバージョンはそれぞれ M-IDU-1.6.0.3V1.1 と MH-46360-2.0.3-R5-GP）は、リモートコマンドインジェクションに対して脆弱です。コマンドはログイン前実行を使用して実行され、root 権限で実行されるため、完全な乗っ取りが可能になります。この脆弱性は Lionel Musonza によって検証されています。 脆弱性タイプ CWE-77 コマンドに使用される特殊要素の不適切な無害化（'Command Injection'） cwe...

CVE-2023-26866

GreenPacket OH736's WR-1200 Indoor Unit, OT-235 with firmware versions M-IDU-1.6.0.3V1.1 and MH-46360-2.0.3-R5-GP respectively are vulnerable to remote command injection. Commands are executed using pre-login execution and executed with root privileges allowing complete takeover...

Command injection

GreenPacket OH736's WR-1200 Indoor Unit, OT-235 with firmware versions M-IDU-1.6.0.3V1.1 and MH-46360-2.0.3-R5-GP respectively are vulnerable to remote command injection. Commands are executed using pre-login execution and executed with root privileges allowing complete takeover...

CVE-2023-26866

GreenPacket OH736's WR-1200 Indoor Unit, OT-235 with firmware versions M-IDU-1.6.0.3V1.1 and MH-46360-2.0.3-R5-GP respectively are vulnerable to remote command injection. Commands are executed using pre-login execution and executed with root privileges allowing complete takeover...

PT-2023-20835 · Green Packet · Ot-235 +1

Name of the Vulnerable Software and Affected Versions: GreenPacket OH736's WR-1200 Indoor Unit version M-IDU-1.6.0.3 V1.1 GreenPacket OH736's OT-235 version MH-46360-2.0.3-R5-GP Description: The issue allows for remote command injection. Commands are executed before login and with root privileges...