logo

Researchers disclose vulnerabilities in IP KVMs from four manufacturers

ID: 1316e701-4c68-5363-a679-883019d1d08b

STIX ID: report--1316e701-4c68-5363-a679-883019d1d08b

Feed Name: Ars Technica Security

Threat Score
75/100

Date Published: 2026-03-17

Date Updated: 2026-04-19

Author: Dan Goodin

...
...

Researchers from Eclypsium disclosed nine vulnerabilities in low-cost IP KVM devices from multiple manufacturers that can grant attackers BIOS/UEFI-level access. The report warns that insecure default configurations, internet-exposed devices, insider connections, and firmware flaws could enable remote takeover or physical-equivalent access to connected systems.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.