bastille-3.dell-km714.public.txt

Bastille Threat Research Team Tracking Number 3
Document version: 1.1
Cert VU#981271
http://www.kb.cert.org/vuls/id/981271



Overview

A vulnerability has been discovered that allows a device to be paired with
a Dell KM714 dongle that presents itself as a mouse, but is actually a keyboard. 
This permits keystroke injection without a keyboard being visible to the host 
operating system.



Impact

This vulnerability allows an attacker to pair a fake mouse with a target 
Dell KM714 dongle, and use the fake mouse to inject keystrokes into the target 
computer. The Logitech Unifying dongle presents the new device as a mouse, so 
the user would be unaware that a "keyboard" was paired with their dongle. 



Affected Platforms

The following products have been tested and shown to be affected:

- Dell KM714 Wireless Keyboard and Mouse Combo
- Dell KM714 USB dongle (USB ID 046d:c52b)



Mitigation

Exploiting this vulnerability involves transmitting RF packets to a Dell KM714
dongle, which requires physical proximity to the target computer.



More Information

https://www.mousejack.com/



Credits

Marc Newlin



About Bastille

https://www.bastille.net/