Lucene search

MitreCVE-2016-6257

HistoryAug 02, 2016 - 2:59 p.m.

CVE-2016-6257

2016-08-0214:59:04

CWE-310

mitre

web.nvd.nist.gov

lenovo ultraslim dongles

firmware vulnerability

keyjack injection attack

remote attack

aes counters

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:L/Au:N/C:N/I:P/A:N

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

6.6

Confidence

High

EPSS

0.002

Percentile

58.7%

JSON

The firmware in Lenovo Ultraslim dongles, as used with Lenovo Liteon SK-8861, Ultraslim Wireless, and Silver Silk keyboards and Liteon ZTM600 and Ultraslim Wireless mice, does not enforce incrementing AES counters, which allows remote attackers to inject encrypted keyboard input into the system by leveraging proximity to the dongle, aka a “KeyJack injection attack.”

Affected configurations

Nvd

Node

amazonbasicsfirmwareMatch-

AND

amazonbasicsusb_dongleMatch-

amazonbasicswireless_keyboardMatch-

Node

dellkm714_firmwareRange≤012.005.00028

AND

dellkm714_dongleMatch-

dellkm714_wireless_keyboardMatch-

Node

dellkm632_firmwareMatch-

AND

dellkm632_dongleMatch-

dellkm632_wireless_keyboardMatch-

Node

logitechunifying_firmwareRange≤012.005.00028

logitechunifying_firmwareRange≤024.003.00027

AND

logitechunifying_dongleMatch-

Node

lenovoultraslim_firmwareMatch-

AND

lenovoultraslim_dongleMatch-

lenovoultraslim_wireless_keyboardMatch-

VendorProductVersionCPE
amazonbasicsfirmware-cpe:2.3:o:amazonbasics:firmware:-:*:*:*:*:*:*:*
amazonbasicsusb_dongle-cpe:2.3:h:amazonbasics:usb_dongle:-:*:*:*:*:*:*:*
amazonbasicswireless_keyboard-cpe:2.3:h:amazonbasics:wireless_keyboard:-:*:*:*:*:*:*:*
dellkm714_firmware*cpe:2.3:o:dell:km714_firmware:*:*:*:*:*:*:*:*
dellkm714_dongle-cpe:2.3:h:dell:km714_dongle:-:*:*:*:*:*:*:*
dellkm714_wireless_keyboard-cpe:2.3:h:dell:km714_wireless_keyboard:-:*:*:*:*:*:*:*
dellkm632_firmware-cpe:2.3:o:dell:km632_firmware:-:*:*:*:*:*:*:*
dellkm632_dongle-cpe:2.3:h:dell:km632_dongle:-:*:*:*:*:*:*:*
dellkm632_wireless_keyboard-cpe:2.3:h:dell:km632_wireless_keyboard:-:*:*:*:*:*:*:*
logitechunifying_firmware*cpe:2.3:o:logitech:unifying_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
amazonbasics	firmware	-	cpe:2.3:o:amazonbasics:firmware:-:::::::*
amazonbasics	usb_dongle	-	cpe:2.3:h:amazonbasics:usb_dongle:-:::::::*
amazonbasics	wireless_keyboard	-	cpe:2.3:h:amazonbasics:wireless_keyboard:-:::::::*
dell	km714_firmware	*	cpe:2.3:o:dell:km714_firmware::::::::
dell	km714_dongle	-	cpe:2.3:h:dell:km714_dongle:-:::::::*
dell	km714_wireless_keyboard	-	cpe:2.3:h:dell:km714_wireless_keyboard:-:::::::*
dell	km632_firmware	-	cpe:2.3:o:dell:km632_firmware:-:::::::*
dell	km632_dongle	-	cpe:2.3:h:dell:km632_dongle:-:::::::*
dell	km632_wireless_keyboard	-	cpe:2.3:h:dell:km632_wireless_keyboard:-:::::::*
logitech	unifying_firmware	*	cpe:2.3:o:logitech:unifying_firmware::::::::

Rows per page:

1-10 of 141

References

www.securityfocus.com/bid/92179

github.com/BastilleResearch/keyjack/blob/master/doc/advisories/bastille-13.lenovo-ultraslim.public.txt

support.lenovo.com/product_security/len_7267

www.bastille.net/research/vulnerabilities/keyjack

Social References

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:L/Au:N/C:N/I:P/A:N

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

6.6

Confidence

High

EPSS

0.002

Percentile

58.7%

JSON

Related for CVE-2016-6257