Hardcoded Encryption Key Vulnerability in ATEN KVM Switches
CVE-2009-1472

Currently unrated

Key Information:

Vendor

Aten

Status
Kh1516i Ip Kvm Switch
Kn9116 Ip Kvm Switch
Vendor
CVE Published:
27 May 2009

What is CVE-2009-1472?

The Java client program associated with ATEN's KH1516i and KN9116 IP KVM switches contains a hardcoded AES encryption key. This security flaw allows man-in-the-middle attackers to potentially execute arbitrary Java code or gain unauthorized access to systems connected through the KVM switch by hijacking secure sessions. Proper remediation is crucial to prevent exploitation of this vulnerability, emphasizing the importance of secure key management practices.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.securityfocus.com/bid/35108
vdb-entryx_refsource_BID
http://www.securityfocus.com/archive/1/503827/100/0/threaded
mailing-listx_refsource_BUGTRAQ

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.