CVE-2010-1184

The Microsoft wireless keyboard uses XOR encryption with a key derived from the MAC address, which makes it easier for remote attackers to obtain keystroke information and inject arbitrary commands via a nearby wireless device, as demonstrated by Keykeriki 2.

Score

CVSS 2.0 7.6 High

Status

Modified - cve@mitre.org

Published

2010-03-29

Last modified

2024-08-07

Weaknesses

CWE-310

Affected products

• 27mhz Wireless Keyboard (Microsoft)

References

• http://www.remote-exploit.org/?p=437
• http://www.theregister.co.uk/2010/03/26/open_source_wireless_sniffer/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57978