GCVE - cpe:2.3:o:kramerav:via_go2_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:kramerav:via_go2_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Kramerav (`12a6b1ad-f99a-58a1-9907-ade7e2de6a4e`)
Product	Via Go2 Firmware (`ef67c2f3-03a4-5140-9b5a-b34e2303b103`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-33509`	vulnerable	2026-06-08 06:06:23.223083	Details available KramerAV VIA GO² < 4.0.1.1326 is vulnerable to SQL Injection. Published: 2023-05-31T00:00:00.000Z Updated: 2025-01-10T15:25:43.941Z Open on db.gcve.eu Reference links https://zxsecurity.co.nz/research/advisories/kramer-via-go-2-rce-and-other-vulns/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-33508`	vulnerable	2026-06-08 06:06:23.222721	Details available KramerAV VIA GO² < 4.0.1.1326 is vulnerable to unauthenticated file upload resulting in Remote Code Execution (RCE). Published: 2023-05-31T00:00:00.000Z Updated: 2025-01-10T15:24:45.715Z Open on db.gcve.eu Reference links https://zxsecurity.co.nz/research/advisories/kramer-via-go-2-rce-and-other-vulns/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-33507`	vulnerable	2026-06-08 06:06:23.222309	Details available KramerAV VIA GO² < 4.0.1.1326 is vulnerable to Unauthenticated arbitrary file read. Published: 2023-05-31T00:00:00.000Z Updated: 2025-01-10T15:25:27.838Z Open on db.gcve.eu Reference links https://zxsecurity.co.nz/research/advisories/kramer-via-go-2-rce-and-other-vulns/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-33469`	vulnerable	2026-06-08 06:06:23.194122	Details available In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 can be exploited to achieve local code execution at the root level. Published: 2023-08-09T00:00:00.000Z Updated: 2026-07-09T00:26:02.237Z Open on db.gcve.eu Reference links https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2023-33469	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-33468`	vulnerable	2026-06-08 06:06:23.192497	Details available KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables remote manipulation of the device. This vulnerability involves extracting the connection confirmation code remotely, bypassing the need to obtain it directly from the physical screen. Published: 2023-08-09T00:00:00.000Z Updated: 2026-07-09T00:26:01.016Z Open on db.gcve.eu Reference links https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2023-33468	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.