CVE-2019-9835

The receiver (aka bridge) component of Fujitsu Wireless Keyboard Set LX901 GK900 devices allows Keystroke Injection

published March 15, 2019

CVSS
โ€”
EPSS
1%
Percentile
49.0
In the wild
Unconfirmed
What it is

โš ๏ธ An unexpected vulnerability lies in the Fujitsu Wireless Keyboard Set LX901! The receiver allows keystroke injection by accepting unencrypted packets โ€” imagine leaving your front door wide open for anyone to walk in and use your computer! ๐Ÿ”ฅ Think of it like a restaurant that serves food without checking if the orders are correct โ€” anyone could come in, shout their favorite dish, and get served without any verification. This flaw lets an attacker inject keystrokes as if they were typing directly on your keyboard! An attacker could exploit this vulnerability to send unauthorized commands to your computer, potentially accessing sensitive information or executing malicious actions without your consent. This is surprisingly sneaky and could put your data at risk if you're not careful!

Put simply

Think of it like a restaurant that serves food without checking if the orders are correct โ€” anyone could come in, shout their favorite dish, and get served without any verification. This flaw lets an attacker inject keystrokes as if they were typing directly on your keyboard! CVE-2019-9835 affects the bridge component of Fujitsu Wireless Keyboard Set LX901 GK900 devices, allowing keystroke injection due to the acceptance of unencrypted 2.4 GHz packets, while legitimate communication relies on AES encryption.

What to do

An attacker could exploit this vulnerability to send unauthorized commands to your computer, potentially accessing sensitive information or executing malicious actions without your consent. This is surprisingly sneaky and could put your data at risk if you're not careful! To protect yourself, avoid using the vulnerable Fujitsu keyboard set if you can. Keep an eye on updates or security advisories from Fujitsu for any patches or fixes. If you're using these devices, consider replacing them with newer models that enforce proper encryption. ๐Ÿ›ก๏ธ You've got this! Stay informed and secure your setup, and you'll keep those digital intruders at bay! ๐Ÿ’ช๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00620 ยท 49.0th percentile
Published
2019-03-15T18:00Z
EPSS history
Timeline
  • 15 MAR 18:00Z
    The receiver (aka bridge) component of Fujitsu Wireless Keyboard Set LX901 GK900 devices allows Keystroke Injection
    cvelistv5