Vulnerability in Microsoft Wireless Keyboard 850
CVE-2018-8117
A security feature bypass vulnerability exists in the Microsoft Wireless Keyboard 850 which could allow an attacker to reuse an AES encryption key to send keystrokes to other keyboard devices or to read keystrokes sent by other keyboards for the affected devices, aka "Microsoft Wireless Keyboard 850 Security Feature Bypass Vulnerability." This affects Microsoft Wireless Keyboard 850.
EPSS: 0.012 (65.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N.
Affected products
- Microsoft Wireless Keyboard 850 — versions Microsoft Wireless Keyboard 850
- Microsoft Wireless_keyboard_850
References
- secure@microsoft.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- secure@microsoft.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2018-8117?
- CVE-2018-8117 is a medium-severity vulnerability in Microsoft Wireless Keyboard 850. CVSS score: 6.8/10. Published 2018-04-12.
- How severe is CVE-2018-8117?
- Medium severity. CVSS v3 base score is 6.8 out of 10.