CVE-2023-33468

CRITICAL

9.1

Description

KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables remote manipulation of the device. This vulnerability involves extracting the connection confirmation code remotely, bypassing the need to obtain it directly from the physical screen.

CVE Details

CVSS v3.1 Score9.1

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published8/9/2023

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

kramerav:via_connect2kramerav:via_connect2_firmwarekramerav:via_go2kramerav:via_go2_firmware

Weaknesses (CWE)

CWE-863

References

http://kramerav.com(cve@mitre.org)

https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2023-33468(cve@mitre.org)

http://kramerav.com(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2023-33468(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.