GL-iNet Comet KVM Unauthenticated Root Access via UART Serial Console

A vulnerability in the GL-iNet Comet KVM (GL-RM1) allows for unauthenticated root access through the UART serial console. This issue requires physical access to the device to connect to the UART pins, bypassing all network-based authentication controls. Once accessed, the UART interface provides a root shell, enabling full control over the device.

Impact

Exploitation of this vulnerability grants root-level access to the KVM device via the UART interface, allowing an attacker to control the device as if they were physically present. This access can be used to manipulate the KVM's behavior, such as injecting keystrokes or booting from removable media to access connected systems at a low level.