Skip to content
OpenAdvisories

Product · GL.iNet

Comet KVM

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.7

    GL-iNet Comet (GL-RM1) KVM insufficient certificate validation

    The GL-iNet Comet (GL-RM1) KVM connects to a GL-iNet site during boot-up to provision client and CA certificates. The GL-RM1 does not verify certificates used for this connection, allowing an attacker-in-the-middle to serve invalid client and CA certificates.…