Filtered by vendor Kramerav Subscriptions
Filtered by product Via Go2 Subscriptions
Total 5 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-33509 1 Kramerav 2 Via Go2, Via Go2 Firmware 2025-01-10 9.8 Critical
KramerAV VIA GO² < 4.0.1.1326 is vulnerable to SQL Injection.
CVE-2023-33508 1 Kramerav 2 Via Go2, Via Go2 Firmware 2025-01-10 9.8 Critical
KramerAV VIA GO² < 4.0.1.1326 is vulnerable to unauthenticated file upload resulting in Remote Code Execution (RCE).
CVE-2023-33507 1 Kramerav 2 Via Go2, Via Go2 Firmware 2025-01-10 7.5 High
KramerAV VIA GO² < 4.0.1.1326 is vulnerable to Unauthenticated arbitrary file read.
CVE-2023-33469 1 Kramerav 4 Via Connect2, Via Connect2 Firmware, Via Go2 and 1 more 2024-11-21 7.8 High
In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 can be exploited to achieve local code execution at the root level.
CVE-2023-33468 1 Kramerav 4 Via Connect2, Via Connect2 Firmware, Via Go2 and 1 more 2024-11-21 9.1 Critical
KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables remote manipulation of the device. This vulnerability involves extracting the connection confirmation code remotely, bypassing the need to obtain it directly from the physical screen.