PT-2018-18444 · Microsoft · Wireless Keyboard 850

Publicado 2018-04-12 · Atualizado 2019-10-03 · CVE-2018-8117

Positive Technologies (AI Summary)

CVSS v2.0

7.3

Alta

Vetor base

AV:A/AC:M/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions: Microsoft Wireless Keyboard 850

Description: A security feature bypass issue exists that could allow an attacker to reuse an AES encryption key. This could enable the attacker to send keystrokes to other keyboard devices or to read keystrokes sent by other keyboards.

Recommendations: For Microsoft Wireless Keyboard 850, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2018-8117

Produtos afetados

Wireless Keyboard 850

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-8117 · Nota de Segurança
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8117 · Aviso do Fabricante
• http://securityfocus.com/bid/103711 · Nota