CVE-2009-1474: The ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 do...

Security readout for executives and security teams

This CVE affects specific ATEN IP KVM switches. A network attacker in the right position could interfere with mouse control sent through the KVM, and session cookies may be exposed if transmitted over HTTP because the Secure flag is missing. Exposure is limited to environments using the named ATEN IP KVM models and firmware versions, especially where management traffic crosses untrusted networks or HTTP remains reachable. Treat as a targeted infrastructure risk, not a broad internet software emergency. Prioritize if these KVMs manage sensitive servers or traverse shared networks. Mitigation focus: Check ATEN or support-channel guidance for corrected firmware or vendor-recommended mitigations.; Restrict KVM management access to trusted administration networks or VPN paths.; Disable or block HTTP access to the management interface where operationally possible..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.