PT-2009-3973 · Aten · Aten Kh1516I Ip Kvm Switch+1

Publicado 2009-05-27 · Atualizado 2018-10-10 · CVE-2009-1474

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: ATEN KH1516i IP KVM switch version 1.0.063 ATEN KN9116 IP KVM switch version 1.1.104

Description: The issue concerns the lack of encryption for mouse events and the insecure handling of session cookies in https sessions. This makes it easier for man-in-the-middle attackers to inject network traffic and perform mouse operations on connected machines. Additionally, remote attackers can capture session cookies by intercepting their transmission within an http session.

Recommendations: For ATEN KH1516i IP KVM switch version 1.0.063, consider disabling the mouse event transmission feature until a patch is available that properly encrypts these events. For ATEN KN9116 IP KVM switch version 1.1.104, restrict access to the https session cookie by setting the secure flag, and avoid using http sessions to minimize the risk of cookie capture.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2009-1474

Produtos afetados

Aten Kh1516I Ip Kvm Switch

Aten Kn9116 Ip Kvm Switch

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2009-1474 · Nota de Segurança
• http://securityfocus.com/bid/35108 · Nota
• http://securityfocus.com/archive/1/503827/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50850 · Nota
• http://secunia.com/advisories/35241 · Nota