TI-2023-16558 CVE-2023-33509 · GHSA-gqg8-5m8q-4j2q
KramerAV VIA GO² < 4.0.1.1326 is vulnerable to SQL Injection.
Priority HIGH 82
KramerAV VIA GO² < 4.0.1.1326 is vulnerable to SQL Injection.
Kramerav
Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Kramerav records in CISA KEVNo Kramerav vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records
TI-2023-16557 CVE-2023-33508 · GHSA-rmp7-8h7w-9h3x
KramerAV VIA GO² < 4.0.1.1326 is vulnerable to unauthenticated file upload resulting in Remote Code Execution (RCE).
Priority HIGH 82
KramerAV VIA GO² < 4.0.1.1326 is vulnerable to unauthenticated file upload resulting in Remote Code Execution (RCE).
TI-2023-16539 CVE-2023-33468 · GHSA-jgwh-r9rp-8372
KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326…
Priority HIGH 80
KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables remote manipulation of the device.
TI-2021-14024 CVE-2021-35064 · GHSA-qw8w-2g6w-j99h
KramerAV VIAWare, all tested versions, allow privilege escalation through…
Priority HIGH 80
KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo.
TI-2021-14714 CVE-2021-36356 · GHSA-qjp8-q2c4-mpmm
KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code…
Priority HIGH 75
KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code because ajaxPages/writeBrowseFilePathAjax.php accepts arbitrary executable pathnames (even though browseSystemFiles.php is no longer re…
TI-2023-16556 CVE-2023-33507 · GHSA-9396-r3r2-7xmw
KramerAV VIA GO² < 4.0.1.1326 is vulnerable to Unauthenticated arbitrary file read.
Priority HIGH 72
KramerAV VIA GO² < 4.0.1.1326 is vulnerable to Unauthenticated arbitrary file read.
TI-2023-16540 CVE-2023-33469 · GHSA-xr6c-vcc5-cq9x
In instances where the screen is visible and remote mouse connection is enabled, KramerAV…
Priority HIGH 69
In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 can be exploited to achieve local code execution at the…
TI-2019-12777 CVE-2019-17124 · GHSA-595x-pq6p-x7x2
Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.
Priority MEDIUM 62
Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.