CVE-2023-33468

9.1 criticalEPSS 0.8%

Critical (9.1) in kramerav. EPSS 0.8% chance of exploitation in the next 30 days.

KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables remote manipulation of the device. This vulnerability involves extracting the connection confirmation code remotely, bypassing the need to obtain it directly from the physical screen.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2023-08-09
Modified: 2026-07-09
Record from: the NVD, synced 2026-10-19

Affected

kramerav:via_connect2_firmware
kramerav:via_go2_firmware

References

https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2023-33468
https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2023-33468

Check your stack JSON