CVE-2023-33508

CriticalCVSS 9.8

Published: 31/05/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.41%

69th percentile - higher than 69% of all known CVEs

Summary

KramerAV VIA GO² versions below 4.0.1.1326 are vulnerable to unauthenticated file upload, leading to Remote Code Execution (RCE).

Risk Assessment

Exploitation of this vulnerability could allow attackers to remotely execute code on the system, posing a significant security threat to the organization.

Recommendation

It is recommended to update the software to version 4.0.1.1326 or later to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

KramerAV VIA GO² < 4.0.1.1326 is vulnerable to unauthenticated file upload resulting in Remote Code Execution (RCE).