9.1

CVE-2023-33468

Exploit
KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables remote manipulation of the device. This vulnerability involves extracting the connection confirmation code remotely, bypassing the need to obtain it directly from the physical screen.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Kramerav ≫ Via Go2 Firmware Version < 4.0.1.1326
   Kramerav ≫ Via Go2 Version-
Kramerav ≫ Via Connect2 Firmware Version < 4.0.1.1326
   Kramerav ≫ Via Connect2 Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.64% 0.457
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.1 3.9 5.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

http://kramerav.com
Not Applicable
https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2023-33468
Third Party Advisory
Exploit