CVE-2023-33468

The CVE affects KramerAV VIA Connect (2) and VIA Go (2) prior to version 4.0.1.1326. The root cause is a remote-exploitable flow that lets an attacker obtain the connection confirmation code without using the physical screen, enabling remote manipulation of the device. Affected versions include 4...

CVE-2023-33469

KramerAV VIA Connect (2) and VIA Go (2) are affected by CVE-2023-33469 when screen is visible and a remote mouse connection is enabled. Versions prior to 4.0.1.1326 allow local code execution at root level due to the default remote-mouse startup behavior. Impact is local, with high privileges ris...