243 matches found
CVE-2019-12506: Missing Authentication for Critical Function
Due to unencrypted and unauthenticated data communication, the wireless presenter Logitech R700 Laser Presentation Remote R-R0010 is prone to keystroke injection attacks. Thus, an attacker is able to send arbitrary keystrokes to a victim's computer system, e.g., to install malware when the target...
Inateck 2.4 GHz Wireless Presenter WP1001 Keystroke Injection Vulnerability
Product: 2.4 GHz Wireless Presenter WP1001 Manufacturer: Inateck Affected Versions: Rev. v1.3C Tested Versions: Rev. v1.3C Vulnerability Type: Insufficient Verification of Data Authenticity CWE-345 Keystroke Injection Vulnerability Risk Level: High Solution Status: Open Manufacturer Notification:...
Logitech R700 Laser Presentation Remote Keystroke Injection Vulnerability
Product: R700 Laser Presentation Remote Manufacturer: Logitech Affected Versions: Model R-R0010 PID WD904XM and PID WD802XM Tested Versions: Model R-R0010 PID WD904XM and PID WD802XM Vulnerability Type: Insufficient Verification of Data Authenticity CWE-345 Keystroke Injection Vulnerability Risk...
Google Android System Elevation of Privilege Vulnerability (CNVD-2019-23098)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the System component of Google Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9. An attacker can exploit the vulnerability to remotely...
Inateck 2.4 GHz Wearable Wireless Presenter WP2002 Keystroke Injection Vulnerability
Product: 2.4 GHz Wearable Wireless Presenter WP2002 Manufacturer: Inateck Affected Versions: n/a Tested Versions: n/a Vulnerability Type: Insufficient Verification of Data Authenticity CWE-345 Keystroke Injection Vulnerability Risk Level: High Solution Status: Open Manufacturer Notification:...
Design/Logic Flaw
The receiver aka bridge component of Fujitsu Wireless Keyboard Set LX901 GK900 devices allows Keystroke Injection. This occurs because it accepts unencrypted 2.4 GHz packets, even though all legitimate communication uses AES encryption...
CVE-2019-9835
The receiver aka bridge component of Fujitsu Wireless Keyboard Set LX901 GK900 devices allows Keystroke Injection. This occurs because it accepts unencrypted 2.4 GHz packets, even though all legitimate communication uses AES encryption...
CVE-2019-9835
The receiver aka bridge component of Fujitsu Wireless Keyboard Set LX901 GK900 devices allows Keystroke Injection. This occurs because it accepts unencrypted 2.4 GHz packets, even though all legitimate communication uses AES encryption...
CVE-2019-9835
CVE-2019-9835 concerns the Fujitsu Wireless Keyboard Set LX901 GK900 receiver (bridge). The root cause is that the receiver accepts unencrypted 2.4 GHz packets, while legitimate communication uses AES; this enables keystroke injection. Metrics show a CVSS v3.0 base score of 9.6 (critical, adjacen...
Unpatched Fujitsu Wireless Keyboard Bug Allows Keystroke Injection
UPDATE Fujitsu is stopping sales for its popular wireless keyboard after a researcher discovered it is vulnerable to keystroke injection attacks that could allow an adversary to take control of a victim’s system. Researchers with Germany-based SySS reported on Friday that the high-severity...
PT-2019-19885
Name of the Vulnerable Software and Affected Versions Fujitsu Wireless Keyboard Set LX901 GK900 devices affected versions not specified Description The issue concerns the receiver component of the devices, which is vulnerable to Keystroke Injection. This happens because the component accepts...
CVE-2019-9835: Undefined Security Weakness
The receiver aka bridge component of Fujitsu Wireless Keyboard Set LX901 GK900 devices allows Keystroke Injection. This occurs because it accepts unencrypted 2.4 GHz packets, even though all legitimate communication uses AES encryption...
Logitech Keystroke Injection Flaw Went Unaddressed for Months
Computer peripheral giant Logitech has finally issued a patched version of its Logitech Options desktop app, after being taken to task for a months-old security flaw. The bug could have allowed adversaries to launch keystroke injection attacks against Logitech keyboard owners that used the app...
Intel Remote Keyboard Elevation of Privilege Vulnerability
Intel Remote Keyboard is an application that allows you to connect to a supported PC and control keyboard and mouse input from your smartphone screen. An elevation of privilege vulnerability exists in Intel Remote Keyboard. A local attacker could exploit the vulnerability to inject keystrokes int...
Intel Remote Keyboard elevation of privilege vulnerability (CNVD-2018-08319)
Intel Remote Keyboard is an application that allows you to connect to a supported PC and control keyboard and mouse input from your smartphone screen. An elevation of privilege vulnerability exists in Intel Remote Keyboard. An attacker can exploit the vulnerability to inject keystrokes as a local...
Privilege escalation
Escalation of privilege in all versions of the Intel Remote Keyboard allows a network attacker to inject keystrokes as a local user...
CVE-2018-3641
Escalation of privilege in all versions of the Intel Remote Keyboard allows a network attacker to inject keystrokes as a local user...
Session fixation
Escalation of privilege in all versions of the Intel Remote Keyboard allows a local attacker to inject keystrokes into another remote keyboard session...