PT-2018-18444 · Microsoft · Wireless Keyboard 850

Published 2018-04-12 · Updated 2019-10-03 · CVE-2018-8117

Positive Technologies (AI Summary)

CVSS v2.0

7.3

High

Base vector

AV:A/AC:M/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions: Microsoft Wireless Keyboard 850

Description: A security feature bypass issue exists that could allow an attacker to reuse an AES encryption key. This could enable the attacker to send keystrokes to other keyboard devices or to read keystrokes sent by other keyboards.

Recommendations: For Microsoft Wireless Keyboard 850, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2018-8117

Affected Products

Wireless Keyboard 850

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-8117 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8117 · Vendor Advisory
• http://securityfocus.com/bid/103711 · Note