Researchers disclose vulnerabilities in IP KVMs from four manufacturers

Security researchers from Eclypsium have disclosed nine vulnerabilities in IP KVM devices from four manufacturers. These low-cost ($30–$100) devices allow BIOS/UEFI-level remote access to machines and are often internet-exposed. The flaws include unauthenticated root access and remote code execution, stemming from basic Show more