THAT CHEAP KVM DEVICE COULD EXPOSE YOUR NETWORK TO REMOTE COMPROMISE

Summary from the TLDR InfoSec newsletter

Eclypsium disclosed nine vulnerabilities across four low-cost KVM-over-IP devices from GL-iNet, Angeet/Yeeso, Sipeed, and JetKVM, including a CVSS 9.8 pre-auth RCE chain in the Angeet/Yeeso ES3 and unsigned firmware update mechanisms that could allow backdoored images.