Back to CVE Browser

CVE-2009-1472

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0250%

EPSS Percentile32.07th

PublishedMay 27, 2009

Last ModifiedApr 23, 2026

Vulnerability Description

The Java client program for the ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 has a hardcoded AES encryption key, which makes it easier for man-in-the-middle attackers to (1) execute arbitrary Java code, or (2) gain access to machines connected to the switch, by hijacking a session.

Affected Platforms (CPE)

🔌

Aten

Kh1516i Ip Kvm Switch

= 1.0.063

🔌

Aten

Kn9116 Ip Kvm Switch

= 1.1.104

References & Advisories

🔗 http://www.securityfocus.com/archive/1/503827/100/0/threaded

🔗 http://www.securityfocus.com/bid/35108

🔗 http://www.securityfocus.com/archive/1/503827/100/0/threaded

🔗 http://www.securityfocus.com/bid/35108

Related Vulnerabilities

CVE-2009-147310.0

The (1) Windows and (2) Java client programs for the ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch...

CVE-2009-147710.0

The https web interfaces on the ATEN KH1516i IP KVM switch with firmware 1.0.063, the KN9116 IP KVM switch with firmware 1.1.104, ...

CVE-2009-14747.6

The ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 do not (1) encrypt mouse e...

CVE-2009-049210.0

Unspecified vulnerability in SimpleIrcBot before 1.0 Stable has unknown impact and attack vectors related to an "auth vulnerabilit...