Vulnerabilities

TI-2021-14714 CVE-2021-36356 · GHSA-qjp8-q2c4-mpmm

KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code…

HIGH 75

KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code because ajaxPages/writeBrowseFilePathAjax.php accepts arbitrary executable pathnames (even though browseSystemFiles.php is no longer re…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.54393 Published 2021-08-31 No fix listed CWE-434

TI-2021-14024 CVE-2021-35064 · GHSA-qw8w-2g6w-j99h

KramerAV VIAWare, all tested versions, allow privilege escalation through…

HIGH 80

KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.70753 Published 2021-07-12 No fix listed CWE-269

TI-2019-12777 CVE-2019-17124 · GHSA-595x-pq6p-x7x2

Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.

MEDIUM 62

Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.2254 Published 2019-10-09 No fix listed CWE-276

Vulnerabilities

Filters

KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code…

KramerAV VIAWare, all tested versions, allow privilege escalation through…

Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.