Unrestricted file upload

2023-05-3113:15:00

PRIOn knowledge base

www.prio-n.com

kramerav via go²

unauthenticated file upload

remote code execution

nvd

9.6 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

79.8%

KramerAV VIA GO² < 4.0.1.1326 is vulnerable to unauthenticated file upload resulting in Remote Code Execution (RCE).

CPENameOperatorVersion
via_go2_firmwarelt4.0.1.1326

CPE	Name	Operator	Version
	via_go2_firmware	lt	4.0.1.1326

References

zxsecurity.co.nz/research/advisories/kramer-via-go-2-rce-and-other-vulns/