Skip to main content

Via Connect2 Firmware

2 CVEs product

Monthly

CVE-2023-33469 HIGH POC This Week

In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 can be exploited to achieve local. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Code Injection RCE Via Go2 Firmware Via Connect2 Firmware
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2023-33468 CRITICAL POC Act Now

KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables remote manipulation of the device. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Via Go2 Firmware Via Connect2 Firmware
NVD GitHub VulDB
CVSS 3.1
9.1
EPSS
0.6%
EPSS 0% CVSS 7.8
HIGH POC This Week

In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 can be exploited to achieve local. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Code Injection RCE Via Go2 Firmware +1
NVD GitHub
EPSS 1% CVSS 9.1
CRITICAL POC Act Now

KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables remote manipulation of the device. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Via Go2 Firmware Via Connect2 Firmware
NVD GitHub VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy