Описание
Microsoft Wireless Keyboard 850 Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in the Microsoft Wireless Keyboard 850 which could allow an attacker to reuse an AES encryption key to send keystrokes to other keyboard devices or to read keystrokes sent by other keyboards for the affected devices. An attacker would first have to extract the AES encryption key from the affected keyboard device. The attacker would also need to maintain physical proximity – within wireless range – of the devices for the duration of the attack.
An attacker could use the vulnerability to inject arbitrary keyboard HID packets into a keyboard's dongle. For example, an attacker could simulate keystrokes to send malicious commands into a victim's computer. An attacker could also read keystrokes such as passwords sent by other keyboards for the affected devices.
The update enhances security by mandating unique AES encryption keys are generated for each wireless keyboard device.
FAQ
1. What do I need to download and install to be protected from this vulnerability?
- Click the "Security Update link" in the Affected Products table.
- On the Wireless Keyboard 850 page, scroll down to the Downloads list.
- Under Software and Drivers, select the operating system and architecture for your system.
- Click Wireless Keyboard 850 Update.
- Click Run.
Note that you do not have to restart your system after installing the update.
2. After I installed the update, my keyboard stopped responding. What do I do?
If after installing the update your keyboard stops responding, remove and re-insert the batteries to reset your keyboard.
Возможность эксплуатации
Publicly Disclosed
Exploited
Latest Software Release
Older Software Release
DOS
EPSS
Связанные уязвимости
A security feature bypass vulnerability exists in the Microsoft Wireless Keyboard 850 which could allow an attacker to reuse an AES encryption key to send keystrokes to other keyboard devices or to read keystrokes sent by other keyboards for the affected devices, aka "Microsoft Wireless Keyboard 850 Security Feature Bypass Vulnerability." This affects Microsoft Wireless Keyboard 850.
A security feature bypass vulnerability exists in the Microsoft Wireless Keyboard 850 which could allow an attacker to reuse an AES encryption key to send keystrokes to other keyboard devices or to read keystrokes sent by other keyboards for the affected devices, aka "Microsoft Wireless Keyboard 850 Security Feature Bypass Vulnerability." This affects Microsoft Wireless Keyboard 850.
EPSS