Vulnerability CVE-2019-18201
Published: 2019-10-24   Modified: 2019-11-05

Description:
An issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices. Because of the lack of proper encryption of 2.4 GHz communication, an attacker is able to eavesdrop on sensitive data such as passwords.

See advisories in our WLB2 database:
Topic
Author
Date
Med.
Fujitsu Wireless Keyboard Set LX390 Missing Encryption
Matthias Deeg
24.10.2019

Type:

CWE-311

 (Missing Encryption of Sensitive Data)

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:N/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
None
None

 References:
http://packetstormsecurity.com/files/154955/Fujitsu-Wireless-Keyboard-Set-LX390-Missing-Encryption.html
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-010.txt
https://www.syss.de/pentest-blog/2019/syss-2019-009-syss-2019-010-und-syss-2019-011-schwachstellen-in-weiterer-funktastatur-mit-sicherer-24-ghz-technologie/
Copyright 2024, cxsecurity.com

 

Back to Top