CVE-2023-33468

CriticalCVSS 9.1

Published: 09/08/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.63%

46th percentile - higher than 46% of all known CVEs

Summary

KramerAV VIA Connect (2) and VIA Go (2) devices before version 4.0.1.1326 allow remote extraction of the connection confirmation code, bypassing the need for physical screen access and enabling remote device manipulation.

Risk Assessment

An attacker can remotely take control of the device without authorization, posing a risk of unauthorized network and data access for the organization.

Recommendation

Immediately update the firmware of KramerAV VIA Connect (2) and VIA Go (2) devices to version 4.0.1.1326 or later.

Original NVD description (English source)

KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables remote manipulation of the device. This vulnerability involves extracting the connection confirmation code remotely, bypassing the need to obtain it directly from the physical screen.