TI-2023-23521 CVE-2023-43845
Aten PE6208 2.3.228 and 2.4.232 have default credentials for the privileged telnet…
Priority HIGH 82
Aten PE6208 2.3.228 and 2.4.232 have default credentials for the privileged telnet account.
ATEN
Records33All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high17CVSS 7.0–8.9
Exploited now
ATEN records in CISA KEVNo ATEN vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
33 records
TI-2023-10739 CVE-2023-25413 · GHSA-5c7q-4xhv-cmw9
Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control.
Priority HIGH 72
Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control.
TI-2023-23524 CVE-2023-43848
Incorrect access control in the firewall management function of web interface in Aten…
Priority HIGH 70
Incorrect access control in the firewall management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to alter local firewall settings of the device as if they were the admini…
TI-2023-23520 CVE-2023-43844
Aten PE6208 2.3.228 and 2.4.232 have default credentials for the privileged web interface…
Priority HIGH 70
Aten PE6208 2.3.228 and 2.4.232 have default credentials for the privileged web interface account.
TI-2023-10737 CVE-2023-25409 · GHSA-jfjp-c9jg-cqcx
Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control.
Priority HIGH 70
Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control.
TI-2023-10736 CVE-2023-25407 · GHSA-xfx8-2v9j-75g4
Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control.
Priority HIGH 67
Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control.
TI-2023-10741 CVE-2023-25415 · GHSA-3cvf-fpq3-c29m
Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control.
Priority MEDIUM 63
Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control.
TI-2023-10740 CVE-2023-25414 · GHSA-xxpv-gwrv-58xv
Aten PE8108 2.4.232 is vulnerable to denial of service (DOS).
Priority MEDIUM 63
Aten PE8108 2.4.232 is vulnerable to denial of service (DOS).
TI-2023-23525 CVE-2023-43849
Incorrect access control in firmware upgrade function of web interface in Aten PE6208…
Priority MEDIUM 62
Incorrect access control in firmware upgrade function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to submit a firmware image via HTTP POST requests.
TI-2023-23523 CVE-2023-43847
Incorrect access control in the outlet control function of web interface in Aten PE6208…
Priority MEDIUM 57
Incorrect access control in the outlet control function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to control all the outlets as if they were the administrator via HTTP POST req…
TI-2023-10738 CVE-2023-25411 · GHSA-82cc-5xg5-62m7
Aten PE8108 2.4.232 is vulnerable to Cross Site Request Forgery (CSRF).
Priority MEDIUM 53
Aten PE8108 2.4.232 is vulnerable to Cross Site Request Forgery (CSRF).
TI-2025-03273 CVE-2025-3714 · GHSA-r2f9-cjmv-47gh
ATEN LCD KVM over IP Switch CL5708IM - Stack-based Buffer Overflow
Priority MEDIUM 51
The LCD KVM over IP Switch CL5708IM has a Stack-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unauthenticated remote attackers to exploit this vulnerability to execute arbitrary cod…
TI-2025-03270 CVE-2025-3711 · GHSA-7g8j-95mj-p92j
ATEN LCD KVM over IP Switch CL5708IM - Stack-based Buffer Overflow
Priority MEDIUM 51
The LCD KVM over IP Switch CL5708IM has a Stack-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unauthenticated remote attackers to exploit this vulnerability to execute arbitrary cod…
TI-2025-03269 CVE-2025-3710 · GHSA-46rw-vf77-7m5q
ATEN LCD KVM over IP Switch CL5708IM - Stack-based Buffer Overflow
Priority MEDIUM 51
The LCD KVM over IP Switch CL5708IM has a Stack-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unauthenticated remote attackers to exploit this vulnerability to execute arbitrary cod…
TI-2009-01395 CVE-2009-1473 · GHSA-6753-x4g3-wmj6
The (1) Windows and (2) Java client programs for the ATEN KH1516i IP KVM switch with…
Priority MEDIUM 49
The (1) Windows and (2) Java client programs for the ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 do not properly use RSA cryptography for a symmetric session-key ne…
TI-2009-01398 CVE-2009-1477 · GHSA-j9x4-qhm6-3564
The https web interfaces on the ATEN KH1516i IP KVM switch with firmware 1.0.063, the…
Priority MEDIUM 47
The https web interfaces on the ATEN KH1516i IP KVM switch with firmware 1.0.063, the KN9116 IP KVM switch with firmware 1.1.104, and the PN9108 power-control unit have a hardcoded SSL private key, which makes it easier…
TI-2025-03272 CVE-2025-3713 · GHSA-x75w-pfgr-2224
ATEN LCD KVM over IP Switch CL5708IM - Heap-based Buffer Overflow
Priority MEDIUM 46
The LCD KVM over IP Switch CL5708IM has a Heap-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unauthenticated remote attackers to exploit this vulnerability to perform a denial-of-se…
TI-2025-03271 CVE-2025-3712 · GHSA-8x65-6q44-f5f4
ATEN LCD KVM over IP Switch CL5708IM - Heap-based Buffer Overflow
Priority MEDIUM 46
The LCD KVM over IP Switch CL5708IM has a Heap-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unauthenticated remote attackers to exploit this vulnerability to perform a denial-of-se…
TI-2009-01394 CVE-2009-1472 · GHSA-8rxj-jcx7-7vqh
The Java client program for the ATEN KH1516i IP KVM switch with firmware 1.0.063 and the…
Priority MEDIUM 45
The Java client program for the ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 has a hardcoded AES encryption key, which makes it easier for man-in-the-middle attacker…
TI-2026-08567 CVE-2026-9776 · GHSA-685c-hvrm-mjvc
Path traversal in ATEN Unizon
Priority MEDIUM 43
ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability.
TI-2025-06069 CVE-2025-6685 · GHSA-mvpc-xjxr-w8vj
Missing authorization in ATEN eco DC
Priority MEDIUM 41
ATEN eco DC Missing Authorization Privilege Escalation Vulnerability.
TI-2026-04412 CVE-2026-5057 · GHSA-38fr-fpg3-22rf
Missing authentication in ATEN Unizon
Priority MEDIUM 40
ATEN Unizon RpcProvider Missing Authentication Denial-of-Service Vulnerability.
TI-2026-08569 CVE-2026-9778 · GHSA-8584-g8g6-7rhx
Path traversal in ATEN Unizon
Priority LOW 38
ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability.
TI-2026-08568 CVE-2026-9777 · GHSA-pqwm-59vh-j99g
Path traversal in ATEN Unizon
Priority LOW 38
ATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability.
TI-2014-01565 CVE-2014-1997 · GHSA-4c6p-pc6c-v6p6
The ATEN CN8000 remote-access unit with firmware 1.6.154 and earlier allows remote…
Priority LOW 38
The ATEN CN8000 remote-access unit with firmware 1.6.154 and earlier allows remote attackers to cause a denial of service via unspecified vectors.