CVE-2023-33469

HighCVSS 7.8

Published: 09/08/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

25th percentile - higher than 25% of all known CVEs

Summary

A vulnerability in KramerAV VIA Connect (2) and VIA Go (2) devices prior to version 4.0.1.1326 allows local code execution at the root level when the screen is visible and remote mouse connection is enabled.

Risk Assessment

An attacker with physical access to the device can gain full control over the system, compromising data confidentiality, integrity, and availability.

Recommendation

Immediately update the firmware of KramerAV VIA Connect (2) and VIA Go (2) devices to version 4.0.1.1326 or later.

Other vulnerabilities in KramerAV VIA Connect (2) and VIA Go (2)

CVE-2023-33468Critical
KramerAV VIA Connect (2) and VIA Go (2) devices before version 4.0.1.1326 allow remote extraction of the connection confirmation code, bypassing the need for physical screen access and enabling remote device manipulation.

Original NVD description (English source)

In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 can be exploited to achieve local code execution at the root level.