CVE-2021-35064
CVE-2021-35064
Vexday Risk Score
82Fix now
SSVC decision (CISA)
Act
Exploitation + impact → act immediately
Exploit maturity
Functional exploit
Popular PoC on GitHub (3 stars) — exploitation code widely available.
CVSS —EPSS 70.8%KEV nãoPoC públicaNuclei simMetasploit —Patch —
Lifecycle
12 Jul 2021Published on NVD
07 Apr 2022Public PoC
Weaponization speed
269 daysto first PoC
Recommendation: Patch as soon as possible — active exploitation confirmed.
KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. Sudoers permits running of multiple dangerous commands, including unzip, systemctl and dpkg.
Affected products
n/a · n/apublic PoCs found — 4
githubgithub.com/Chocapikk/CVE-2021-35064★ 3cve_referencepacketstormsecurity.com/files/166623/Kramer-VIAware-Remote-Code-Execution.htmlunverifiedexploitdbwww.exploit-db.com/exploits/50856unverifiedvulncheckvulncheck.com/xdb/25ee6400e583unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.