TLDR Tech / InfoSec
That cheap KVM device could expose your network to remote compromise
Eclypsium disclosed nine vulnerabilities across four low-cost KVM-over-IP devices from GL-iNet, Angeet/Yeeso, Sipeed, and JetKVM, including a CVSS 9.8 pre-auth RCE chain in the Angeet/Yeeso ES3 and unsigned firmware update mechanisms that could allow backdoored images.
Read the full story