CVE-2009-1473

The CVE-2009-1473 entry affects ATEN KH1516i (firmware 1.0.063) and KN9116 (firmware 1.1.104). The root cause is an insecure RSA-based handling of the symmetric session-key negotiation in the Windows/Java clients, enabling a remote attacker to decrypt traffic or perform MITM by replaying client-s...

CVE-2009-1477

The CVE-2009-1477 issue affects ATEN IP KVM devices and PN9108 with the listed firmware versions (KH1516i 1.0.063, KN9116 1.1.104, PN9108). The root cause is a hardcoded SSL private key used for HTTPS web interfaces, enabling an attacker who can extract the key from one device to decrypt HTTPS se...