Kramerav Viaware — known CVE vulnerabilities

Every CVE whose affected-product data names Kramerav Viaware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2019-17124 — CVSS 9.8 (critical): Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.
• CVE-2021-35064 — CVSS 9.8 (critical): KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. Sudoers permits running of multiple…
• CVE-2021-36356 — CVSS 9.8 (critical): KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code because ajaxPages/writeBrowseFilePathAjax.php accepts…