What is CVE-2019-9835?

CVE-2019-9835 is a critical-severity vulnerability in Fujitsu Gk900. CVSS score: 9.6/10. Published 2019-03-15.

How severe is CVE-2019-9835?

Critical severity. CVSS v3 base score is 9.6 out of 10.

Vulnerability in Fujitsu Gk900

CVE-2019-9835

The receiver (aka bridge) component of Fujitsu Wireless Keyboard Set LX901 GK900 devices allows Keystroke Injection. This occurs because it accepts unencrypted 2.4 GHz packets, even though all legitimate communication uses AES encryption.

EPSS: 0.006 (46.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.6 (Critical). Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.

Affected products

Fujitsu Gk900
Fujitsu Gk900_firmware
Fujitsu Lx901
Fujitsu Lx901_firmware
N/a — versions n/a

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)
cve@mitre.org (vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2019-9835?: CVE-2019-9835 is a critical-severity vulnerability in Fujitsu Gk900. CVSS score: 9.6/10. Published 2019-03-15.
How severe is CVE-2019-9835?: Critical severity. CVSS v3 base score is 9.6 out of 10.