CVEvulnerability
CVE-2019-18201
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-10-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-319
Description
An issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices. Because of the lack of proper encryption of 2.4 GHz communication, an attacker is able to eavesdrop on sensitive data such as passwords.
Affected configurations
• fujitsu lx390 firmware
Related
Weakness · CWE (1)
- CWE-319 Cleartext Transmission of Sensitive Information weakness
References
- http://packetstormsecurity.com/files/154955/Fujitsu-Wireless-Keyboard-Set-LX390-Missing-Encryption.html Exploit, Third Party Advisory, VDB Entry
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-010.txt Exploit, Third Party Advisory
- https://www.syss.de/pentest-blog/2019/syss-2019-009-syss-2019-010-und-syss-2019-011-schwachstellen-in-weiterer-funktastatur-mit-sicherer-24-ghz-technologie/ Third Party Advisory
- http://packetstormsecurity.com/files/154955/Fujitsu-Wireless-Keyboard-Set-LX390-Missing-Encryption.html Exploit, Third Party Advisory, VDB Entry
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-010.txt Exploit, Third Party Advisory
- https://www.syss.de/pentest-blog/2019/syss-2019-009-syss-2019-010-und-syss-2019-011-schwachstellen-in-weiterer-funktastatur-mit-sicherer-24-ghz-technologie/ Third Party Advisory