The GH-WDF10A Digital Photo Frame contains active debug code that, when exploited, permits an attacker to read or write files, access configuration data, and execute arbitrary files with root privileges. This level of access effectively gives the attacker full control over the device, enabling manipulation of media content, persistence of malicious code, or further exploitation of connected systems.

Green House Co., LTD’s Digital Photo Frame GH‑WDF10A is affected. No specific firmware or version numbers are provided in the advisory, so all units of this product model require review.

The vulnerability has a CVSS score of 7, indicating a high severity. The EPSS score is not available and the issue is not listed in the CISA KEV catalog, but the potential for root privilege escalation suggests a significant exploitation risk. The attack vector appears to be an exposed debug interface on the device; based on the description it is inferred that an attacker with access to this interface could trigger the exploit, though the exact conditions are not detailed in the CVE.