CVE-2021-35064

CVE-2021-35064 is a critical privilege escalation vulnerability affecting all tested versions of KramerAV VIAWare, stemming from misconfigured sudo permissions that allow unprivileged users to execute dangerous commands like unzip, systemctl, and dpkg. With a CVSS score of 9.8 (Critical), this vulnerability has a network attack vector, low attack complexity, and can lead to complete compromise of confidentiality, integrity, and availability. While not listed in CISA KEV, exploit intelligence indicates public exploit code availability via ExploitDB (EDB-50856) and Nuclei templates, with significant community discussion and media coverage suggesting active awareness and potential for exploitation.