CVE-2009-1477: The https web interfaces on the ATEN KH1516i IP KVM switch with firmware 1.0.063, the KN9116 IP KVM switch...

Security readout for executives and security teams

Some ATEN IP KVM and power-control devices used a shared, hardcoded SSL private key for their HTTPS management interfaces. An attacker with network visibility could use a key from their own similar device to decrypt management traffic to another customer’s device. This threatens confidentiality of administrative sessions. Exposure is most likely where affected ATEN management interfaces are reachable on networks an attacker can observe. Internet exposure would raise urgency, but the source bundle does not state whether default deployments are internet-facing. Prioritize if these devices manage critical servers, power, or remote access paths. The issue is old, but hardcoded cryptographic keys can remain risky for years when legacy hardware stays deployed. Mitigation focus: Identify affected ATEN KH1516i, KN9116, and PN9108 devices and firmware versions.; Check ATEN or maintainer guidance for firmware updates or replacement options.; Restrict management access to trusted administrative networks only..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.