Vulnerability in Aten Kh1516i Ip Kvm Switch
CVE-2009-1477
The https web interfaces on the ATEN KH1516i IP KVM switch with firmware 1.0.063, the KN9116 IP KVM switch with firmware 1.1.104, and the PN9108 power-control unit have a hardcoded SSL private key, which makes it easier for remote attackers to decrypt https sessions by extracting this key from their own switch and then sniffing network traffic to a switch owned by a different customer.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.021 (80.2th percentile) — read the EPSS interpretation.
Affected products
- Aten Kh1516i_ip_kvm_switch — versions 1.0.063
- Aten Kn9116_ip_kvm_switch — versions 1.1.104
- Aten Pn9108_power_over_the_net
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)