kramerav records

8 published records for vendor kramerav.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
60This week	CVE-2021-35064Proof of concept	KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo.kramerav · viaware · CWE-269 Pre-auth	Critical9.8	—	70.8%	Jul 12, 2021
55Plan	CVE-2021-36356Proof of concept	KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code because ajaxPages/writeBrowseFilePathAjax.php accepts akramerav · viaware · CWE-434 pre-auth RCE File upload	Critical9.8	—	54.4%	Aug 31, 2021
46Plan	CVE-2019-17124Proof of concept	Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.kramerav · viaware · CWE-276 Pre-auth	Critical9.8	—	22.5%	Oct 9, 2019
39Monitor	CVE-2023-33508No exploit	KramerAV VIA GO² < 4.0.1.1326 is vulnerable to unauthenticated file upload resulting in Remote Code Execution (RCE).kramerav · via go2 firmware · CWE-434 pre-auth RCE File upload	Critical9.8	—	1.4%	May 31, 2023
39Monitor	CVE-2023-33509No exploit	KramerAV VIA GO² < 4.0.1.1326 is vulnerable to SQL Injection.kramerav · via go2 firmware · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.8%	May 31, 2023
36Monitor	CVE-2023-33468No exploit	KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables remote manipulation kramerav · via go2 firmware · CWE-863 Pre-auth Broken access control (IDOR)	Critical9.1	—	0.8%	Aug 9, 2023
31Monitor	CVE-2023-33469No exploit	In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect (2) and VIA Go (2) devices with a verskramerav · via go2 firmware · CWE-94 RCE	High7.8	—	0.3%	Aug 9, 2023
30Monitor	CVE-2023-33507No exploit	KramerAV VIA GO² < 4.0.1.1326 is vulnerable to Unauthenticated arbitrary file read.kramerav · via go2 firmware Pre-auth	High7.5	—	0.7%	May 31, 2023

CVE-2021-35064
60This week
KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo.
CriticalCVSS 9.8Proof of conceptEPSS 71%
- Pre-auth
kramerav · viawareJul 12, 2021
CVE-2021-36356
55Plan
KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code because ajaxPages/writeBrowseFilePathAjax.php accepts a
CriticalCVSS 9.8Proof of conceptEPSS 54%
- pre-auth RCE
- File upload
kramerav · viawareAug 31, 2021
CVE-2019-17124
46Plan
Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.
CriticalCVSS 9.8Proof of conceptEPSS 23%
- Pre-auth
kramerav · viawareOct 9, 2019
CVE-2023-33508
39Monitor
KramerAV VIA GO² < 4.0.1.1326 is vulnerable to unauthenticated file upload resulting in Remote Code Execution (RCE).
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- File upload
kramerav · via go2 firmwareMay 31, 2023
CVE-2023-33509
39Monitor
KramerAV VIA GO² < 4.0.1.1326 is vulnerable to SQL Injection.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
kramerav · via go2 firmwareMay 31, 2023
CVE-2023-33468
36Monitor
KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables remote manipulation
CriticalCVSS 9.1No exploitEPSS 1%
- Pre-auth
- Broken access control (IDOR)
kramerav · via go2 firmwareAug 9, 2023
CVE-2023-33469
31Monitor
In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect (2) and VIA Go (2) devices with a vers
HighCVSS 7.8No exploitEPSS 0%
- RCE
kramerav · via go2 firmwareAug 9, 2023
CVE-2023-33507
30Monitor
KramerAV VIA GO² < 4.0.1.1326 is vulnerable to Unauthenticated arbitrary file read.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
kramerav · via go2 firmwareMay 31, 2023