Vulnerabilities

TI-2023-16540 CVE-2023-33469 · GHSA-xr6c-vcc5-cq9x

In instances where the screen is visible and remote mouse connection is enabled, KramerAV…

HIGH 69

In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 can be exploited to achieve local code execution at the…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00347 Published 2023-08-09 No fix listed CWE-94

TI-2023-16539 CVE-2023-33468 · GHSA-jgwh-r9rp-8372

KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326…

HIGH 80

KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables remote manipulation of the device.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00763 Published 2023-08-09 No fix listed CWE-863

TI-2023-16558 CVE-2023-33509 · GHSA-gqg8-5m8q-4j2q

KramerAV VIA GO² < 4.0.1.1326 is vulnerable to SQL Injection.

HIGH 82

KramerAV VIA GO² < 4.0.1.1326 is vulnerable to SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00761 Published 2023-05-31 No fix listed CWE-89

TI-2023-16557 CVE-2023-33508 · GHSA-rmp7-8h7w-9h3x

KramerAV VIA GO² < 4.0.1.1326 is vulnerable to unauthenticated file upload resulting in Remote Code Execution (RCE).

HIGH 82

KramerAV VIA GO² < 4.0.1.1326 is vulnerable to unauthenticated file upload resulting in Remote Code Execution (RCE).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01412 Published 2023-05-31 No fix listed CWE-434

TI-2023-16556 CVE-2023-33507 · GHSA-9396-r3r2-7xmw

KramerAV VIA GO² < 4.0.1.1326 is vulnerable to Unauthenticated arbitrary file read.

HIGH 72

KramerAV VIA GO² < 4.0.1.1326 is vulnerable to Unauthenticated arbitrary file read.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00698 Published 2023-05-31 No fix listed

TI-2021-14714 CVE-2021-36356 · GHSA-qjp8-q2c4-mpmm

KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code…

HIGH 75

KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code because ajaxPages/writeBrowseFilePathAjax.php accepts arbitrary executable pathnames (even though browseSystemFiles.php is no longer re…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.54393 Published 2021-08-31 No fix listed CWE-434

TI-2021-14024 CVE-2021-35064 · GHSA-qw8w-2g6w-j99h

KramerAV VIAWare, all tested versions, allow privilege escalation through…

HIGH 80

KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.70753 Published 2021-07-12 No fix listed CWE-269

TI-2019-12777 CVE-2019-17124 · GHSA-595x-pq6p-x7x2

Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.

MEDIUM 62

Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.2254 Published 2019-10-09 No fix listed CWE-276

Vulnerabilities

Filters