medium6.8
CVE-2022-35860
Missing AES encryption in Corsair K63 Wireless 3.1.3 allows physically proximate attackers to inject and sniff keystrokes via 2.4 GHz radio transmissions.
Impact
Missing AES encryption in Corsair K63 Wireless 3.1.3 allows physically proximate attackers to inject and sniff keystrokes via 2.4 GHz radio transmissions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Corsair | K63 Firmware | Version 3.1.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://kth.diva-portal.org/smash/get/diva2:1701492/FULLTEXT01.pdf
- http://kth.diva-portal.org/smash/record.jsf?pid=diva2%3A1701492&dswid=-3616
- https://www.corsair.com/us/en/Categories/Products/Gaming-Keyboards/Wireless-Keyboards/K63-Wireless-Mechanical-Gaming-Keyboard-%E2%80%94-Blue-LED-%E2%80%94-CHERRY%C2%AE-MX-Red/p/CH-9145030-NA
- http://kth.diva-portal.org/smash/get/diva2:1701492/FULLTEXT01.pdf
- http://kth.diva-portal.org/smash/record.jsf?pid=diva2%3A1701492&dswid=-3616
- https://www.corsair.com/us/en/Categories/Products/Gaming-Keyboards/Wireless-Keyboards/K63-Wireless-Mechanical-Gaming-Keyboard-%E2%80%94-Blue-LED-%E2%80%94-CHERRY%C2%AE-MX-Red/p/CH-9145030-NA