CVE-2019-18200: Critical severity fujitsu lx390 firmware vulnerability

Published Oct 24, 2019

Updated

An issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices. Because of the lack of proper encryption of 2.4 GHz communication, they are prone to keystroke injection attacks.

Affected Software

2 affected components

Fujitsu Lx390 Firmware

Fujitsu LX390=gk381

Event History

Oct 24, 2019

CVE Published

via MITRE·02:10 PM

Data Sourced

via MITRE·02:10 PM

Description

Frequently Asked Questions

What is the vulnerability ID of this issue?

The vulnerability ID of this issue is CVE-2019-18200.

What is the severity of CVE-2019-18200?

The severity of CVE-2019-18200 is critical with a severity score of 9.8.

What is affected by CVE-2019-18200?

Fujitsu Wireless Keyboard Set LX390 GK381 devices are affected by CVE-2019-18200.

What is the impact of CVE-2019-18200?

CVE-2019-18200 allows attackers to perform keystroke injection attacks on Fujitsu Wireless Keyboard Set LX390 GK381 devices.

Are there any references available for further information on CVE-2019-18200?

Yes, you can find more information on CVE-2019-18200 at the following links: [Reference 1](http://packetstormsecurity.com/files/154956/Fujitsu-Wireless-Keyboard-Set-LX390-Keystroke-Injection.html), [Reference 2](https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-011.txt), [Reference 3](https://www.syss.de/pentest-blog/2019/syss-2019-009-syss-2019-010-und-syss-2019-011-schwachstellen-in-weiterer-funktastatur-mit-sicherer-24-ghz-technologie/).