Aten vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-5057 ATEN Unizon RpcProvider Missing Authentication Denial-of-Service Vulnerability.High 7.5 · Jul 29, 2026
• CVE-2026-9779 ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability.High 7.2 · Jun 24, 2026
• CVE-2026-9778 ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability.High 7.2 · Jun 24, 2026
• CVE-2026-9777 ATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability.High 7.2 · Jun 24, 2026
• CVE-2026-9776 ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability.High 7.5 · Jun 24, 2026
• CVE-2025-6685 ATEN eco DC Missing Authorization Privilege Escalation Vulnerability.High 8.8 · Sep 2, 2025
• CVE-2025-3714 The LCD KVM over IP Switch CL5708IM has a Stack-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unauthenticated remote attaCritical 9.3 · May 9, 2025
• CVE-2025-3713 The LCD KVM over IP Switch CL5708IM has a Heap-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unauthenticated remote attacHigh 8.7 · May 9, 2025
• CVE-2025-3712 The LCD KVM over IP Switch CL5708IM has a Heap-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unauthenticated remote attacHigh 8.7 · May 9, 2025
• CVE-2025-3711 The LCD KVM over IP Switch CL5708IM has a Stack-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unauthenticated remote attaCritical 9.3 · May 9, 2025
• CVE-2025-3710 The LCD KVM over IP Switch CL5708IM has a Stack-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unauthenticated remote attaCritical 9.3 · May 9, 2025
• CVE-2023-43848 Incorrect access control in the firewall management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to alter locaHigh 8 · May 28, 2024
• CVE-2023-43845 Aten PE6208 2.3.228 and 2.4.232 have default credentials for the privileged telnet account.Critical 9.8 · May 28, 2024
• CVE-2023-43844 Aten PE6208 2.3.228 and 2.4.232 have default credentials for the privileged web interface account.High 8 · May 28, 2024
• CVE-2023-43843 Incorrect access control in the account management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to read user aHigh 7.3 · May 28, 2024
• CVE-2023-43842 Incorrect access control in the account management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to alter user High 7.3 · May 28, 2024
• CVE-2023-25413 Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control.High 7.5 · Apr 11, 2023
• CVE-2023-25409 Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control.High 8.1 · Apr 11, 2023
• CVE-2023-25407 Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control.High 7.2 · Apr 11, 2023
• CVE-2014-1997 The ATEN CN8000 remote-access unit with firmware 1.6.154 and earlier allows remote attackers to cause a denial of service via unspecified vectors.High 7.8 · Jun 5, 2014
• CVE-2009-1477 The https web interfaces on the ATEN KH1516i IP KVM switch with firmware 1.0.063, the KN9116 IP KVM switch with firmware 1.1.104, and the PN9108 power-control uHigh 10 · May 27, 2009
• CVE-2009-1474 The ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 do not (1) encrypt mouse events, which makes it easier fHigh 7.6 · May 27, 2009
• CVE-2009-1473 The (1) Windows and (2) Java client programs for the ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 do not High 10 · May 27, 2009
• CVE-2009-1472 The Java client program for the ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 has a hardcoded AES encryptiHigh 10 · May 27, 2009