CVE Explorer
CVE-2026-33201
Digital Photo Frame GH-WDF10A provided by GREEN HOUSE CO., LTD. contains an active debug code vulnerability. If this vulnerability is exploited, files or configurations on the affected device may be read or written, or arbitrary files may be executed with root privileges.
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1
Preserved source conflicts
No provider value was silently selected as the winner.
cvss · 2 assertions
{"metric":{"baseScore":7,"baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0"},"metric_type":"cvssV4_0"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:320411d9ad34faa12df59df9877ae7350232c446724fa5b94378840c86d75333 · sha256:c0cd9e0c90fbdc25… · /containers/cna/metrics/1/cvssV4_0
{"metric":{"baseScore":6.8,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.0"},"metric_type":"cvssV3_0"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:320411d9ad34faa12df59df9877ae7350232c446724fa5b94378840c86d75333 · sha256:c0cd9e0c90fbdc25… · /containers/cna/metrics/0/cvssV3_0
Affected products and versions
1 source assertion{"product":"Digital Photo Frame GH-WDF10A","vendor":"GREEN HOUSE CO., LTD.","versions":[{"status":"affected","version":"all versions"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:320411d9ad34faa12df59df9877ae7350232c446724fa5b94378840c86d75333 · sha256:c0cd9e0c90fbdc25… · /containers/cna/affected/0
Provider-owned CVSS observations
2 source assertions{"metric":{"baseScore":7,"baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0"},"metric_type":"cvssV4_0"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:320411d9ad34faa12df59df9877ae7350232c446724fa5b94378840c86d75333 · sha256:c0cd9e0c90fbdc25… · /containers/cna/metrics/1/cvssV4_0
{"metric":{"baseScore":6.8,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.0"},"metric_type":"cvssV3_0"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:320411d9ad34faa12df59df9877ae7350232c446724fa5b94378840c86d75333 · sha256:c0cd9e0c90fbdc25… · /containers/cna/metrics/0/cvssV3_0
CWE assertions
1 source assertion{"cweId":"CWE-489","description":"Active debug code","lang":"en-US","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:320411d9ad34faa12df59df9877ae7350232c446724fa5b94378840c86d75333 · sha256:c0cd9e0c90fbdc25… · /containers/cna/problemTypes/0/descriptions/0
Source references
2 source assertions{"url":"https://jvn.jp/en/jp/JVN18035227/"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:320411d9ad34faa12df59df9877ae7350232c446724fa5b94378840c86d75333 · sha256:c0cd9e0c90fbdc25… · /containers/cna/references/1
{"url":"https://www.green-house.co.jp/note/info_gh-wdf10a/"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:320411d9ad34faa12df59df9877ae7350232c446724fa5b94378840c86d75333 · sha256:c0cd9e0c90fbdc25… · /containers/cna/references/0
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.