9 Critical IP KVM Flaws Enable Unauthenticated Root Access Across Four Vendors

Cybersecurity researchers at Eclypsium disclosed nine vulnerabilities across four low-cost IP KVM products that range from insufficient firmware signature verification and missing authentication to UART root access and command injection; several have high CVSS scores (including 9.8 and 8.8) and some remain unpatched. Because IP KVMs provide BIOS/UEFI-level keyboard/video/mouse access, successful exploitation can enable persistent, stealthy full-system takeover (bypassing disk encryption, Secure Boot, and OS-level detection); recommended mitigations include enforcing MFA, isolating KVM devices on management VLANs, restricting Internet exposure, monitoring traffic, and applying available firmware fixes.