CVE Catalog

CVE-2023-33509

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.76%

50th percentile - higher than 50% of all known CVEs

Summary

KramerAV VIA GO² versions below 4.0.1.1326 are vulnerable to SQL Injection, which may allow unauthorized access to the database.

Risk Assessment

Exploitation of this vulnerability could lead to the disclosure of sensitive data and potential system takeover.

Recommendation

It is recommended to update the software to version 4.0.1.1326 or later to mitigate this vulnerability.

Original NVD description (English source)

KramerAV VIA GO² < 4.0.1.1326 is vulnerable to SQL Injection.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS