CVE-2021-36356

KRAMER VIAware (through Aug 2021) is vulnerable to remote code execution via ajaxPages/writeBrowseFilePathAjax.php which accepts arbitrary executable pathnames, enabling unauthenticated attackers to upload and execute code. The issue stems from an incomplete fix for CVE-2019-17124. Reports in CVE...

Kramer Electronics VIAware code issue vulnerabilities

Kramer Electronics VIAware is a wireless presentation collaboration software solution from Kramer Electronics Israel. A code issue exists in Kramer Electronics VIAware that allows remote attackers to execute arbitrary code because ajaxPages/writeBrowseFilePathAjax.php accepts arbitrary executable...

CVE-2021-36356: Unrestricted Upload of File with Dangerous Type

KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code because ajaxPages/writeBrowseFilePathAjax.php accepts arbitrary executable pathnames even though browseSystemFiles.php is no longer reachable via the GUI. NOTE: this issue exists because of an incomplete fix for...

PT-2021-21248

Name of the Vulnerable Software and Affected Versions KRAMER VIAware versions prior to September 2021 Description The issue allows remote attackers to execute arbitrary code. This is because the ajaxPages/writeBrowseFilePathAjax.php endpoint accepts arbitrary executable pathnames. The problem...

Unspecified Vulnerability in VIAware

Kramer Electronics VIAware is a wireless presentation collaboration software solution from Kramer Electronics, Israel. A security vulnerability exists in all tested versions of KramerAV VIAWare, which can be exploited by an attacker to elevate privileges via misconfigured sudo...

CVE-2021-35064

KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. Sudoers permits running of multiple dangerous commands, including unzip, systemctl and dpkg...

Design/Logic Flaw

KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. Sudoers permits running of multiple dangerous commands, including unzip, systemctl and dpkg...

CVE-2021-35064

KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. Sudoers permits running of multiple dangerous commands, including unzip, systemctl and dpkg...

CVE-2021-35064

Kramer VIAware (VIAware web interface) is affected by CVE-2021-35064 with concrete details in connected sources: misconfigured sudoers permissions grant privilege escalation by allowing dangerous commands (e.g., unzip, systemctl, dpkg), enabling possible remote code execution patterns. Nuclei tem...

CVE-2021-35064

KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. Sudoers permits running of multiple dangerous commands, including unzip, systemctl and dpkg...

PT-2021-20822

Name of the Vulnerable Software and Affected Versions KramerAV VIAWare affected versions not specified Description The software allows for privilege escalation due to improper sudo configuration. The sudoers file permits the execution of multiple dangerous commands, including unzip, systemctl, an...

CVE-2021-35064: Improper Privilege Management

KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. Sudoers permits running of multiple dangerous commands, including unzip, systemctl and dpkg...

VIAware security vulnerabilities

Kramer Electronics VIAware is a wireless presentation collaboration software solution from Kramer Electronics, Israel. A security vulnerability exists in all tested versions of KramerAV VIAWare, which can be exploited by an attacker to elevate privileges via misconfigured sudo...

CVE-2019-17124

Kramer VIAware 2.5.0719.1034 has Incorrect Access Control...

CVE-2019-17124

Kramer VIAware 2.5.0719.1034 has Incorrect Access Control...

Improper access control

Kramer VIAware 2.5.0719.1034 has Incorrect Access Control...

CVE-2019-17124

CVE-2019-17124 affects Kramer VIAware; multiple connected sources (Red Hat CVE-2021-36356, CVE lists) indicate the issue persists via an incomplete fix and allows remote code execution through ajaxPages/writeBrowseFilePathAjax.php by accepting arbitrary pathnames. The advisory notes this is an af...

CVE-2019-17124

Kramer VIAware 2.5.0719.1034 has Incorrect Access Control...

Exploit for Incorrect Default Permissions in Kramerav Viaware

Exploit Title: KRAMER VIAware 2.5.0719.1034 - Remote Code Exec...

PT-2019-14961

Name of the Vulnerable Software and Affected Versions Kramer VIAware version 2.5.0719.1034 Description The issue is related to Incorrect Access Control. Recommendations For version 2.5.0719.1034, update to a newer version that addresses the Incorrect Access Control issue...