CVE-2023-33469

Description

In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 can be exploited to achieve local code execution at the root level.

Related CPE's

okrameravvia_go2_firmware********

hkrameravvia_go2-*******

okrameravvia_connect2_firmware********

hkrameravvia_connect2-*******

References

https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2023-33469

ExploitThird Party Advisory

http://kramerav.com

Product

CvssV3 impact

Could not find any metrics

CvssV2 impact

Could not find any metrics
Created by Yello
About Severity.io