Keystroke Injection Vulnerability in Fujitsu Wireless Keyboard Set LX390
CVE-2019-18200

9.8CRITICAL

Key Information:

Vendor

Fujitsu

Status
Lx390 Firmware
Vendor
CVE Published:
24 October 2019

What is CVE-2019-18200?

An identified vulnerability in the Fujitsu Wireless Keyboard Set LX390 allows for keystroke injection due to inadequate encryption of its 2.4 GHz communication. This weakness makes it possible for an attacker to intercept and inject keystrokes remotely, potentially compromising sensitive information and user actions. Users are advised to remain vigilant and consider alternatives or mitigations until a patch is released to address this security concern.

References

https://www.syss.de/fileadmin/dokumente/Publikationen/Adv...
x_refsource_MISC
http://packetstormsecurity.com/files/154956/Fujitsu-Wirel...
x_refsource_MISC
https://www.syss.de/pentest-blog/2019/syss-2019-009-syss-...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2019-18200 : Keystroke Injection Vulnerability in Fujitsu Wireless Keyboard Set LX390