CVE-2022-35860 | BDVDB-2026-186949 Detail
Description#
Missing AES encryption in Corsair K63 Wireless 3.1.3 allows physically proximate attackers to inject and sniff keystrokes via 2.4 GHz radio transmissions.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact none. Attack vector: adjacent.
Weaknesses#
- CWE-311 Missing Encryption of Sensitive Data
References#
- https://www.corsair.com/us/en/Categories/Products/Gaming-Keyboards/Wireless-Keyboards/K63-Wireless-Mechanical-Gaming-Keyboard-%E2%80%94-Blue-LED-%E2%80%94-CHERRY%C2%AE-MX-Red/p/CH-9145030-NA
- http://kth.diva-portal.org/smash/get/diva2:1701492/FULLTEXT01.pdf
- http://kth.diva-portal.org/smash/record.jsf?pid=diva2%3A1701492&dswid=-3616
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.