Lucene search

K
cve[email protected]CVE-2010-1184
HistoryMar 29, 2010 - 10:30 p.m.

CVE-2010-1184

2010-03-2922:30:00
CWE-310
web.nvd.nist.gov
27
cve-2010-1184
microsoft
wireless keyboard
xor encryption
mac address
remote attackers
keystroke information
injection
keykeriki 2

7.4 High

AI Score

Confidence

Low

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

67.5%

The Microsoft wireless keyboard uses XOR encryption with a key derived from the MAC address, which makes it easier for remote attackers to obtain keystroke information and inject arbitrary commands via a nearby wireless device, as demonstrated by Keykeriki 2.

7.4 High

AI Score

Confidence

Low

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

67.5%

Related for CVE-2010-1184