$30 IP-KVM Flaws Could Enable BIOS-Level Enterprise Network Attacks

Recent research revealed nine vulnerabilities in low-cost IP‑KVM devices (GL‑iNet, Angeet, Sipeed, JetKVM) that enable BIOS‑level compromise—such as unauthenticated file upload and chained command injection yielding root RCE—allowing attackers to bypass OS and endpoint controls; many devices are internet‑exposed, some vulnerabilities remain unpatched, and active exploitation has been reported, so immediate isolation and remediation are recommended.