CVE-2009-1473
- State
- Published
- Severity
- Not scored
- Published
- May 27, 2009
- Updated
- Aug 7, 2024
- Reserved
- Apr 28, 2009
Description
The (1) Windows and (2) Java client programs for the ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 do not properly use RSA cryptography for a symmetric session-key negotiation, which makes it easier for remote attackers to (a) decrypt network traffic, or (b) conduct man-in-the-middle attacks, by repeating unspecified "client-side calculations."
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 35241third-party-advisory
- 35108vdb-entry
- 20090526 Multiple vulnerabilities in several ATEN IP KVM Switchesmailing-list
- aten-kvm-client-weak-security(50849)vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.