kramerav kayıtları
kramerav üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-269 Improper Privilege Management1
- CWE-276 Incorrect Default Permissions1
- CWE-863 Incorrect Authorization1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
60Bu hafta | CVE-2021-35064Kavram kanıtı | KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo.kramerav · viaware · CWE-269 | Kritik9,8 | — | %70,8 | 12 Tem 2021 |
55Planlayın | CVE-2021-36356Kavram kanıtı | KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code because ajaxPages/writeBrowseFilePathAjax.php accepts akramerav · viaware · CWE-434 | Kritik9,8 | — | %54,4 | 31 Ağu 2021 |
46Planlayın | CVE-2019-17124Kavram kanıtı | Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.kramerav · viaware · CWE-276 | Kritik9,8 | — | %22,5 | 9 Eki 2019 |
39İzleyin | CVE-2023-33508İstismar yok | KramerAV VIA GO² < 4.0.1.1326 is vulnerable to unauthenticated file upload resulting in Remote Code Execution (RCE).kramerav · via go2 firmware · CWE-434 | Kritik9,8 | — | %1,4 | 31 May 2023 |
39İzleyin | CVE-2023-33509İstismar yok | KramerAV VIA GO² < 4.0.1.1326 is vulnerable to SQL Injection.kramerav · via go2 firmware · CWE-89 | Kritik9,8 | — | %0,8 | 31 May 2023 |
36İzleyin | CVE-2023-33468İstismar yok | KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables remote manipulation kramerav · via go2 firmware · CWE-863 | Kritik9,1 | — | %0,8 | 9 Ağu 2023 |
31İzleyin | CVE-2023-33469İstismar yok | In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect (2) and VIA Go (2) devices with a verskramerav · via go2 firmware · CWE-94 | Yüksek7,8 | — | %0,3 | 9 Ağu 2023 |
30İzleyin | CVE-2023-33507İstismar yok | KramerAV VIA GO² < 4.0.1.1326 is vulnerable to Unauthenticated arbitrary file read.kramerav · via go2 firmware | Yüksek7,5 | — | %0,7 | 31 May 2023 |
- CVE-2021-3506460Bu hafta
KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo.
KritikCVSS 9,8Kavram kanıtıEPSS %71kramerav · viaware12 Tem 2021
- CVE-2021-3635655Planlayın
KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code because ajaxPages/writeBrowseFilePathAjax.php accepts a
KritikCVSS 9,8Kavram kanıtıEPSS %54kramerav · viaware31 Ağu 2021
- CVE-2019-1712446Planlayın
Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.
KritikCVSS 9,8Kavram kanıtıEPSS %23kramerav · viaware9 Eki 2019
- CVE-2023-3350839İzleyin
KramerAV VIA GO² < 4.0.1.1326 is vulnerable to unauthenticated file upload resulting in Remote Code Execution (RCE).
KritikCVSS 9,8İstismar yokEPSS %1kramerav · via go2 firmware31 May 2023
- CVE-2023-3350939İzleyin
KramerAV VIA GO² < 4.0.1.1326 is vulnerable to SQL Injection.
KritikCVSS 9,8İstismar yokEPSS %1kramerav · via go2 firmware31 May 2023
- CVE-2023-3346836İzleyin
KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables remote manipulation
KritikCVSS 9,1İstismar yokEPSS %1kramerav · via go2 firmware9 Ağu 2023
- CVE-2023-3346931İzleyin
In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect (2) and VIA Go (2) devices with a vers
YüksekCVSS 7,8İstismar yokEPSS %0kramerav · via go2 firmware9 Ağu 2023
- CVE-2023-3350730İzleyin
KramerAV VIA GO² < 4.0.1.1326 is vulnerable to Unauthenticated arbitrary file read.
YüksekCVSS 7,5İstismar yokEPSS %1kramerav · via go2 firmware31 May 2023