Multiple ATEN IP KVM Switches Multiple Remote Vulnerabilities and Weakness
BID:35108
Info
Multiple ATEN IP KVM Switches Multiple Remote Vulnerabilities and Weakness
| Bugtraq ID: | 35108 |
| Class: | Unknown |
| CVE: |
CVE-2009-1474 CVE-2009-1473 CVE-2009-1472 CVE-2009-1477 |
| Remote: | Yes |
| Local: | No |
| Published: | May 26 2009 12:00AM |
| Updated: | May 27 2009 12:10AM |
| Credit: | Jakob Lell from the TU Berlin computer security working group |
| Vulnerable: |
ATEN IP KVM PN9108 0 ATEN IP KVM KN9116 1.1.1.014 ATEN IP KVM KH1516i 1.0.063 |
| Not Vulnerable: | |
Discussion
Multiple ATEN IP KVM Switches Multiple Remote Vulnerabilities and Weakness
Multiple ATEN IP KVM switches are prone to multiple remote vulnerabilities and a weakness:
- A security weakness may allow attackers to decrypt HTTP traffic.
- A remote code-execution vulnerability is present.
- A security vulnerability may allow attackers to gain access to the session key.
- A security vulnerability may allow attackers to gain access to mouse events.
- A security vulnerability may allow attackers to gain access to the session ID.
Attackers can exploit these issues to execute Java code, compromise and gain unauthorized access to the affected device connected to the KVM, gain access to the session key, and gain access to the session ID. Other attacks are also possible.
Multiple ATEN IP KVM switches are prone to multiple remote vulnerabilities and a weakness:
- A security weakness may allow attackers to decrypt HTTP traffic.
- A remote code-execution vulnerability is present.
- A security vulnerability may allow attackers to gain access to the session key.
- A security vulnerability may allow attackers to gain access to mouse events.
- A security vulnerability may allow attackers to gain access to the session ID.
Attackers can exploit these issues to execute Java code, compromise and gain unauthorized access to the affected device connected to the KVM, gain access to the session key, and gain access to the session ID. Other attacks are also possible.
Exploit / POC
Multiple ATEN IP KVM Switches Multiple Remote Vulnerabilities and Weakness
Attackers can use readily available network utilities to exploit these issues.
Attackers can use readily available network utilities to exploit these issues.
Solution / Fix
Multiple ATEN IP KVM Switches Multiple Remote Vulnerabilities and Weakness
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Multiple ATEN IP KVM Switches Multiple Remote Vulnerabilities and Weakness
References:
References:
- Vendor Homepage (ATEN)
- Multiple vulnerabilities in several ATEN IP KVM Switches (Jakob Lell