CVE-2023-33508

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

KramerAV VIA GO² < 4.0.1.1326 is vulnerable to unauthenticated file upload resulting in Remote Code Execution (RCE).

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
May 31, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-335099.8KramerAV VIA GO² < 4.0.1.1326 is vulnerable to SQL Injection.CVE-2023-335107.5Jeecg P3 Biz Chat 1.0.5 allows remote attackers to read arbitrary files through specific parameters.CVE-2023-335155.4SoftExpert Excellence Suite 2.1.9 is vulnerable to Cross Site Scripting (XSS) via query screens.CVE-2023-335177.5carRental 1.0 is vulnerable to Incorrect Access Control (Arbitrary File Read on the Back-end System).CVE-2023-335185.3emoncms v11 and later was discovered to contain an information disclosure vulnerability which allows attackers to obtain the web directory pCVE-2023-33524.3The Smush plugin for WordPress is vulnerable to unauthorized deletion of the resmush list due to a missing capability check on the delete_reCVE-2023-335245.3Advent/SSC Inc. Tamale RMS < 23.1 is vulnerable to Directory Traversal. If one traverses to the affected URL, one enumerates Contact informaCVE-2023-335286.1halo v1.6.0 is vulnerable to Cross Site Scripting (XSS).CVE-2023-335308.8There is a command injection vulnerability in the Tenda G103 Gigabit GPON Terminal with firmware version V1.0.0.5. If an attacker gains web CVE-2023-335329.8There is a command injection vulnerability in the Netgear R6250 router with Firmware Version 1.0.4.48. If an attacker gains web management pCVE-2023-335338.8Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Firmware Version 1.0.3.60, R6700 with Firmware Version 1.0.2.26, and R6900 with FirCVE-2023-335348.8A Cross-Site Request Forgery (CSRF) in Guanzhou Tozed Kangwei Intelligent Technology ZLTS10G software version S10G_3.11.6 allows attackers t
CVE-2023-33508: Critical severity, CVSS 9.8 | Vulnix