{"id":"CVE-2026-33201","state":"PUBLISHED","title":"Digital Photo Frame GH-WDF10A provided by GREEN HOUSE CO., LTD. contains an active debug code vulnerability. If this vulnerability is exploited, files or configurations on the affe","description":"Digital Photo Frame GH-WDF10A provided by GREEN HOUSE CO., LTD. contains an active debug code vulnerability. If this vulnerability is exploited, files or configurations on the affected device may be read or written, or arbitrary files may be executed with root privileges.","publishedAt":"2026-03-26T04:18:57.635Z","updatedAt":"2026-03-26T13:55:23.959Z","severity":{"score":7,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"jpcert"},"assigner":"jpcert","products":["GREEN HOUSE CO., LTD. Digital Photo Frame GH-WDF10A"],"affected":[{"vendor":"GREEN HOUSE CO., LTD.","product":"Digital Photo Frame GH-WDF10A","versions":[{"version":"all versions","status":"affected"}]}],"references":["https://www.green-house.co.jp/note/info_gh-wdf10a/","https://jvn.jp/en/jp/JVN18035227/"],"weaknesses":["CWE-489"],"ingestedAt":"2026-10-29T20:11:40.391Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/33xxx/CVE-2026-33201.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-33201","state":"PUBLISHED","datePublished":"2026-03-26T04:18:57.635Z","dateUpdated":"2026-03-26T13:55:23.959Z","assignerShortName":"jpcert","assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateReserved":"2026-03-17T23:23:26.571Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Digital Photo Frame GH-WDF10A provided by GREEN HOUSE CO., LTD. contains an active debug code vulnerability. If this vulnerability is exploited, files or configurations on the affected device may be read or written, or arbitrary files may be executed with root privileges."}],"affected":[{"vendor":"GREEN HOUSE CO., LTD.","product":"Digital Photo Frame GH-WDF10A","versions":[{"version":"all versions","status":"affected"}]}],"references":[{"url":"https://www.green-house.co.jp/note/info_gh-wdf10a/"},{"url":"https://jvn.jp/en/jp/JVN18035227/"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_0":{"version":"3.0","baseSeverity":"MEDIUM","baseScore":6.8,"vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}},{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV4_0":{"version":"4.0","baseSeverity":"HIGH","baseScore":7,"vectorString":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-489","description":"Active debug code","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"jpcert","orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateUpdated":"2026-03-26T04:18:57.635Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-03-26T13:55:13.143693Z","id":"CVE-2026-33201","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-03-26T13:55:23.959Z"}}]}}}