via_connect2 vulnerabilities

2 known vulnerabilities in via_connect2 from Kramerav. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  via_connect2: Improper Control of Generation of Code

  CVE-2023-33469Aug 9, 2023Kramerav

  In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 can be exploited to achieve local code execution at the root level.

• 9.1 Critical severity

  via_connect2: Incorrect Authorization

  CVE-2023-33468Aug 9, 2023Kramerav

  KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables remote manipulation of the device. This vulnerability involves extracting the connection confirmation code remotely, bypassing the need to o