Vulnerabilities found in low-cost KVM devices can give attackers the equivalent of physical access to everything they connect to.