Vulnerabilities

TI-2023-16540 CVE-2023-33469 · GHSA-xr6c-vcc5-cq9x

In instances where the screen is visible and remote mouse connection is enabled, KramerAV…

HIGH 69

In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 can be exploited to achieve local code execution at the…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00347 Published 2023-08-09 No fix listed CWE-94

TI-2023-16539 CVE-2023-33468 · GHSA-jgwh-r9rp-8372

KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326…

HIGH 80

KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables remote manipulation of the device.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00763 Published 2023-08-09 No fix listed CWE-863

TI-2023-16558 CVE-2023-33509 · GHSA-gqg8-5m8q-4j2q

KramerAV VIA GO² < 4.0.1.1326 is vulnerable to SQL Injection.

HIGH 82

KramerAV VIA GO² < 4.0.1.1326 is vulnerable to SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00761 Published 2023-05-31 No fix listed CWE-89

TI-2023-16557 CVE-2023-33508 · GHSA-rmp7-8h7w-9h3x

KramerAV VIA GO² < 4.0.1.1326 is vulnerable to unauthenticated file upload resulting in Remote Code Execution (RCE).

HIGH 82

KramerAV VIA GO² < 4.0.1.1326 is vulnerable to unauthenticated file upload resulting in Remote Code Execution (RCE).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01412 Published 2023-05-31 No fix listed CWE-434

TI-2023-16556 CVE-2023-33507 · GHSA-9396-r3r2-7xmw

KramerAV VIA GO² < 4.0.1.1326 is vulnerable to Unauthenticated arbitrary file read.

HIGH 72

KramerAV VIA GO² < 4.0.1.1326 is vulnerable to Unauthenticated arbitrary file read.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00698 Published 2023-05-31 No fix listed

Vulnerabilities

Filters

In instances where the screen is visible and remote mouse connection is enabled, KramerAV…

KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326…

KramerAV VIA GO² < 4.0.1.1326 is vulnerable to SQL Injection.

KramerAV VIA GO² < 4.0.1.1326 is vulnerable to unauthenticated file upload resulting in Remote Code Execution (RCE).

KramerAV VIA GO² < 4.0.1.1326 is vulnerable to Unauthenticated arbitrary file read.