Vulnerability in Microsoft Wireless Keyboard 850
CVE-2018-8117
A security feature bypass vulnerability exists in the Microsoft Wireless Keyboard 850 which could allow an attacker to reuse an AES encryption key to send keystrokes to other keyboard devices or to read keystrokes sent by other keyboards for the affected devices, aka "Microsoft Wireless Keyboard 850 Security Feature Bypass Vulnerability." This affects Microsoft Wireless Keyboard 850.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N.
EPSS exploit prediction
EPSS: 0.012 (65.9th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 66th percentile — 65.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.012 · newest: 0.012 · change: -0.000
Affected products
- Microsoft Wireless Keyboard 850 — versions Microsoft Wireless Keyboard 850
- Microsoft Wireless Keyboard 850
References
- www.securityfocus.com/bid/103711 (VDB Entry, Third Party Advisory, vdb-entry)
- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8117 (Patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2018-8117?
- CVE-2018-8117 is a medium-severity vulnerability in Microsoft Wireless Keyboard 850. CVSS score: 6.8/10. Published 2018-04-12.
- How severe is CVE-2018-8117?
- Medium severity. CVSS v3 base score is 6.8 out of 10.