CVE-2023-33468

CRITICAL

9.1

Description

KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables remote manipulation of the device. This vulnerability involves extracting the connection confirmation code remotely, bypassing the need to obtain it directly from the physical screen.

Details CVE

Score CVSS v3.19.1

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie8/9/2023

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

kramerav:via_connect2kramerav:via_connect2_firmwarekramerav:via_go2kramerav:via_go2_firmware

Faiblesses (CWE)

CWE-863

References

http://kramerav.com(cve@mitre.org)

https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2023-33468(cve@mitre.org)

http://kramerav.com(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2023-33468(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.