Back to CVE Browser

CVE-2009-1473

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1600%

EPSS Percentile32.91th

PublishedMay 27, 2009

Last ModifiedApr 23, 2026

Vulnerability Description

The (1) Windows and (2) Java client programs for the ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 do not properly use RSA cryptography for a symmetric session-key negotiation, which makes it easier for remote attackers to (a) decrypt network traffic, or (b) conduct man-in-the-middle attacks, by repeating unspecified "client-side calculations."

Affected Platforms (CPE)

🔌

Aten

Kh1516i Ip Kvm Switch

= 1.0.063

🔌

Aten

Kh1516i Ip Kvm Switch

= 1.0.063

🔌

Aten

Kn9116 Ip Kvm Switch

= 1.1.104

🔌

Aten

Kn9116 Ip Kvm Switch

= 1.1.104

References & Advisories

🔗 http://secunia.com/advisories/35241

🔗 http://www.securityfocus.com/archive/1/503827/100/0/threaded

🔗 http://www.securityfocus.com/bid/35108

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/50849

🔗 http://secunia.com/advisories/35241

🔗 http://www.securityfocus.com/archive/1/503827/100/0/threaded

🔗 http://www.securityfocus.com/bid/35108

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/50849

Related Vulnerabilities

CVE-2009-147210.0

The Java client program for the ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.10...

CVE-2009-147710.0

The https web interfaces on the ATEN KH1516i IP KVM switch with firmware 1.0.063, the KN9116 IP KVM switch with firmware 1.1.104, ...

CVE-2009-14747.6

The ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 do not (1) encrypt mouse e...

CVE-2009-109610.0

Buffer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 ...