CVE Catalog
CVE-2023-33507
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk0.70%
48th percentile - higher than 48% of all known CVEs
Summary
KramerAV VIA GO² versions below 4.0.1.1326 are vulnerable to unauthenticated arbitrary file read.
Risk Assessment
An attacker could gain access to sensitive data stored on the server, potentially leading to privacy and security breaches for the organization.
Recommendation
It is recommended to update the software to version 4.0.1.1326 or later to mitigate this vulnerability.
Other vulnerabilities in KramerAV VIA GO²
See all- CVE-2023-33509Critical
KramerAV VIA GO² versions below 4.0.1.1326 are vulnerable to SQL Injection, which may allow unauthorized access to the database.
- CVE-2023-33508Critical
KramerAV VIA GO² versions below 4.0.1.1326 are vulnerable to unauthenticated file upload, leading to Remote Code Execution (RCE).
Original NVD description (English source)
KramerAV VIA GO² < 4.0.1.1326 is vulnerable to Unauthenticated arbitrary file read.