Information disclosure in Lenovo Usb Enhanced Performance Keyboard

CVE-2015-3320

Lenovo USB Enhanced Performance Keyboard software before 2.0.2.2 includes active debugging code in SKHOOKS.DLL, which allows local users to obtain keypress information by accessing debug output.

Vulnerability class: Information Disclosure

EPSS: 0.003 (24.5th percentile) — read the EPSS interpretation.

Affected products

Lenovo Usb_enhanced_performance_keyboard
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)