Скачать или смотреть Des failles de sécurité dans des appareils KVM Sipeed révélées!

Researcher finds undocumented microphone and major security flaws in Sipeed NanoKVM.

The researcher says the device’s software stack exposes weak points from the moment it boots. Early units arrived with a pre-set password and open SSH access, a problem the researcher reported to Sipeed and which the company later corrected. The web interface still lacks basic protections, including CSRF defence and any mechanism to invalidate active sessions.

More troubling, the encryption key used to protect login passwords in the browser is hardcoded and identical across all devices. According to the researcher, this had to be explained to the developers “multiple times” before they acknowledged the issue.

Source: https://www.tomshardware.com/tech-ind...

https://securite.fm