CVEvulnerability
CVE-2019-9835
9.6 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2019-03-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.6 CRITICAL — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:A/AC:L/Au:N/C:P/I:P/A:P
Description
The receiver (aka bridge) component of Fujitsu Wireless Keyboard Set LX901 GK900 devices allows Keystroke Injection. This occurs because it accepts unencrypted 2.4 GHz packets, even though all legitimate communication uses AES encryption.
Affected configurations
• fujitsu lx901 firmware
• fujitsu gk900 firmware
References
- http://www.securityfocus.com/bid/107440 www.securityfocus.com
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-033.txt Exploit, Third Party Advisory
- http://www.securityfocus.com/bid/107440 www.securityfocus.com
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-033.txt Exploit, Third Party Advisory