CVE-2018-8117

EPSS 1.2%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 1.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

12 Apr 2018Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A security feature bypass vulnerability exists in the Microsoft Wireless Keyboard 850 which could allow an attacker to reuse an AES encryption key to send keystrokes to other keyboard devices or to read keystrokes sent by other keyboards for the affected devices, aka "Microsoft Wireless Keyboard 850 Security Feature Bypass Vulnerability." This affects Microsoft Wireless Keyboard 850.

Affected products

Microsoft · Microsoft Wireless Keyboard 850

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8117 http://www.securityfocus.com/bid/103711