CVE-2016-6257

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-08-02 · updated 2026-06-17
Weakness: CWE-310

Description

The firmware in Lenovo Ultraslim dongles, as used with Lenovo Liteon SK-8861, Ultraslim Wireless, and Silver Silk keyboards and Liteon ZTM600 and Ultraslim Wireless mice, does not enforce incrementing AES counters, which allows remote attackers to inject encrypted keyboard input into the system by leveraging proximity to the dongle, aka a "KeyJack injection attack."

Affected products

Amazonbasics Firmware: all versions
Dell Km632 Firmware: all versions
Dell Km714 Firmware: through 012.005.00028
Lenovo Ultraslim Firmware: all versions
Logitech Unifying Firmware: through 012.005.00028; through 024.003.00027

References

http://www.securityfocus.com/bid/92179
https://github.com/BastilleResearch/keyjack/blob/master/doc/advisories/bastille-13.lenovo-ultraslim.public.txt
https://support.lenovo.com/product_security/len_7267
https://www.bastille.net/research/vulnerabilities/keyjack
http://www.securityfocus.com/bid/92179
https://github.com/BastilleResearch/keyjack/blob/master/doc/advisories/bastille-13.lenovo-ultraslim.public.txt
https://support.lenovo.com/product_security/len_7267
https://www.bastille.net/research/vulnerabilities/keyjack

Get alerted when CVE-2016-6257 or the next vulnerability affects your stack