Kramerav

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Kramerav records in CISA KEV

No Kramerav vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Via Go2 Firmware 5 records HIGH Viaware 3 records HIGH Via Connect2 Firmware 2 records HIGH

Records

3 records in Viaware · all components

TI-2021-14024 CVE-2021-35064 · GHSA-qw8w-2g6w-j99h

KramerAV VIAWare, all tested versions, allow privilege escalation through…

HIGH 80

KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.70753 Published 2021-07-12 No fix listed CWE-269

TI-2021-14714 CVE-2021-36356 · GHSA-qjp8-q2c4-mpmm

KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code…

HIGH 75

KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code because ajaxPages/writeBrowseFilePathAjax.php accepts arbitrary executable pathnames (even though browseSystemFiles.php is no longer re…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.54393 Published 2021-08-31 No fix listed CWE-434

TI-2019-12777 CVE-2019-17124 · GHSA-595x-pq6p-x7x2

Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.

MEDIUM 62

Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.2254 Published 2019-10-09 No fix listed CWE-276

Open these records in search →

Critical	6
High	2
Medium	0
Low	0
No CVSS	0