EDB-50856

PoC

Kramer VIAware - Remote Code Execution (RCE) (Root)

view exploit source exploit_dbtype remoteauthor sharkmoospublished 2022-04-07catalog exploit_db

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2021-36356US	critical9.8	54.4% (99th)	Exploit	2021-08-31
KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code because ajaxPages/writeBrowseFilePathAjax.php accepts arbitrary executable pathnames (even thou…
CVE-2021-35064US	critical9.8	70.8% (99th)	Exploit	2021-07-12
KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. Sudoers permits running of multiple dangerous commands, including unzip, systemc…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.