CVE-2023-33468
Last modified
CVE-2023-33468 is a critical-severity vulnerability rated 9.1/10 on the CVSS scale. KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables remote manipulation of the device. This vulnerability involves extracting the connection confirmation code remotely, bypassing the need to obtain it directly from the physical screen.. EPSS estimates a 0.64% chance of exploitation in the next 30 days.
Description
KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables remote manipulation of the device. This vulnerability involves extracting the connection confirmation code remotely, bypassing the need to obtain it directly from the physical screen.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Kramerav | Via Go2 Firmware | < 4.0.1.1326 |
| Kramerav | Via Connect2 Firmware | < 4.0.1.1326 |
References
- https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2023-33468Exploit, Third Party Advisory
- https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2023-33468Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-33468?
How severe is CVE-2023-33468?
How do I fix CVE-2023-33468?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-3345The LMS by Masteriyo WordPress plugin before 1.6.8 does not …6.5
- CVE-2023-33457In Sogou Workflow v0.10.6, memcpy a negtive size in URIParse…8.8
- CVE-2023-3346Buffer Copy without Checking Size of Input ('Classic Buffer …9.8
- CVE-2023-33460There's a memory leak in yajl 2.1.0 with use of yajl_tree_pa…6.5
- CVE-2023-33461iniparser v4.1 is vulnerable to NULL Pointer Dereference in …5.5
- CVE-2023-33466Orthanc before 1.12.0 allows authenticated users with access…8.8
- CVE-2023-33469In instances where the screen is visible and remote mouse co…7.8
- CVE-2023-3347A vulnerability was found in Samba's SMB2 packet signing mec…5.9
- CVE-2023-33472An issue was discovered in Scada-LTS v2.7.5.2 build 45518836…8.8
- CVE-2023-33476ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vu…9.8
- CVE-2023-33477In Harmonic NSG 9000-6G devices, an authenticated remote use…6.5
- CVE-2023-33478RemoteClinic 2.0 has a SQL injection vulnerability in the ID…9.8
Are you affected by CVE-2023-33468?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST