CVEvulnerability
CVE-2019-18200
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2019-10-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
An issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices. Because of the lack of proper encryption of 2.4 GHz communication, they are prone to keystroke injection attacks.
Affected configurations
• fujitsu lx390 firmware
References
- http://packetstormsecurity.com/files/154956/Fujitsu-Wireless-Keyboard-Set-LX390-Keystroke-Injection.html Exploit, Third Party Advisory, VDB Entry
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-011.txt Exploit, Third Party Advisory
- https://www.syss.de/pentest-blog/2019/syss-2019-009-syss-2019-010-und-syss-2019-011-schwachstellen-in-weiterer-funktastatur-mit-sicherer-24-ghz-technologie/ Third Party Advisory
- http://packetstormsecurity.com/files/154956/Fujitsu-Wireless-Keyboard-Set-LX390-Keystroke-Injection.html Exploit, Third Party Advisory, VDB Entry
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-011.txt Exploit, Third Party Advisory
- https://www.syss.de/pentest-blog/2019/syss-2019-009-syss-2019-010-und-syss-2019-011-schwachstellen-in-weiterer-funktastatur-mit-sicherer-24-ghz-technologie/ Third Party Advisory