CVE-2023-33469

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2023-08-09 · updated 2026-07-09
Weakness: CWE-94

Description

In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 can be exploited to achieve local code execution at the root level.

Affected products

Kramerav Via Connect2 Firmware: before 4.0.1.1326 — fixed in 4.0.1.1326
Kramerav Via Go2 Firmware: before 4.0.1.1326 — fixed in 4.0.1.1326

How to fix

Upgrade to a fixed version: Kramerav Via Connect2 Firmware 4.0.1.1326; Kramerav Via Go2 Firmware 4.0.1.1326. Check the vendor advisory for mitigations.

References

https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2023-33469
https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2023-33469

Get alerted when CVE-2023-33469 or the next vulnerability affects your stack