CVEvulnerability

CVE-2023-33468

9.1 CRITICAL Published 2023-08-09 Modified 2026-07-09 Official page ↗
Status
Modified
Published
2023-08-09
Last modified
2026-07-09
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-863

Description

KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables remote manipulation of the device. This vulnerability involves extracting the connection confirmation code remotely, bypassing the need to obtain it directly from the physical screen.

Affected configurations

• kramerav via go2 firmware (< 4.0.1.1326) • kramerav via connect2 firmware (< 4.0.1.1326)

Related

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References