« Volver al listado

CVE-2010-1184

Estado: ModificadaAlta (7.6)—

El teclado Microsoft wireless (sin cables) usa una encriptación XOR con una clave derivada de la dirección MAC, lo que hace fácil a atacantes remotos obtener las pulsaciones de teclado e inyectar comandos de su elección a través de un dispositivo sin cables en las proximidades, tal como ha sido demostrado por Keykeriki 2.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Microsoft — 27mhz Wireless Keyboard

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-1184",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.6,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "HIGH",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 4.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-03-29T22:30:00.377",
  "references": [
    {
      "url": "http://www.remote-exploit.org/?p=437",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.theregister.co.uk/2010/03/26/open_source_wireless_sniffer/",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57978",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.remote-exploit.org/?p=437",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.theregister.co.uk/2010/03/26/open_source_wireless_sniffer/",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57978",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-310"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Microsoft wireless keyboard uses XOR encryption with a key derived from the MAC address, which makes it easier for remote attackers to obtain keystroke information and inject arbitrary commands via a nearby wireless device, as demonstrated by Keykeriki 2."
    },
    {
      "lang": "es",
      "value": "El teclado Microsoft wireless (sin cables) usa una encriptación XOR con una clave derivada de la dirección MAC, lo que hace fácil a atacantes remotos obtener las pulsaciones de teclado e inyectar comandos de su elección a través de un dispositivo sin cables en las proximidades, tal como ha sido demostrado por Keykeriki 2."
    }
  ],
  "lastModified": "2026-06-16T23:17:47.360",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:microsoft:27mhz_wireless_keyboard:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "73D293B3-7FB8-411C-9AD9-5101132D0AA0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}