ATEN Unizon fleet management platform: Unizon is ATEN's centralized manager for its KVM and PDU fleet. The restoreDB

Impact

Unizon is ATEN's centralized manager for its KVM and PDU fleet. The restoreDB function doesn't validate a user-supplied path before writing to it, letting an authenticated attacker write files anywhere on the host and execute code with SYSTEM privileges — full compromise of the platform that has management-plane reach into every KVM and PDU it administers.

Who can reach it

Requires an authenticated account on Unizon (the advisory doesn't specify a high privilege tier is needed), then sends a crafted path to the restoreDB endpoint.

What to do

Software upgrade to the patched Unizon release. Since Unizon is the single management server for the whole device fleet rather than per-device firmware, this is one upgrade — but treat it as urgent given the blast radius (SYSTEM-level access to the platform that manages every connected KVM/PDU).

References