CVE-2019-9835: Critical severity fujitsu lx901 vulnerability

Published Mar 15, 2019

Updated

The receiver (aka bridge) component of Fujitsu Wireless Keyboard Set LX901 GK900 devices allows Keystroke Injection. This occurs because it accepts unencrypted 2.4 GHz packets, even though all legitimate communication uses AES encryption.

Affected Software

8 affected components

All of the following

Fujitsu Lx901 Firmware

Fujitsu LX901

All of the following

Fujitsu Gk900 Firmware

Fujitsu GK900

Fujitsu Lx901 Firmware

Fujitsu LX901

Fujitsu Gk900 Firmware

Fujitsu GK900

Event History

Mar 15, 2019

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Data Sourced

via NVD·06:29 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the vulnerability ID of this issue?

The vulnerability ID of this issue is CVE-2019-9835.

What is the severity level of CVE-2019-9835?

The severity level of CVE-2019-9835 is critical (9.6).

What is the affected software of CVE-2019-9835?

The affected software of CVE-2019-9835 is Fujitsu Wireless Keyboard Set LX901 GK900 devices.

How does the vulnerability CVE-2019-9835 occur?

The vulnerability CVE-2019-9835 occurs because the receiver component of Fujitsu Wireless Keyboard Set LX901 GK900 devices accepts unencrypted 2.4 GHz packets.

Are there any references available for CVE-2019-9835?

Yes, there are references available for CVE-2019-9835. You can find them at http://www.securityfocus.com/bid/107440 and https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-033.txt.