CVE-2019-9835

Critical

Description

The receiver (aka bridge) component of Fujitsu Wireless Keyboard Set LX901 GK900 devices allows Keystroke Injection. This occurs because it accepts unencrypted 2.4 GHz packets, even though all legitimate communication uses AES encryption.

SeverityCritical
CVSS9.6
Exploit probability—
ProductFujitsu Lx901 Firmware
PublishedMar 15, 2019
First seenMar 15, 2019

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
fujitsu lx901_firmwareNo range specified—
fujitsu gk900_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2019-9835 · Fujitsu Lx901 Firmware · Dark Radar