| Package | Affected versions | Patched versions |
|---|---|---|
| kvm | ≤ 0.5.3 |
JetKVM prior to 0.5.4 does not verify the authenticity of downloaded firmware files. An attacker-in-the-middle or a compromised update server could modify the firmware and the corresponding SHA256 hash to pass verification.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free