Sculpt Ergonomic Desktop MouseJack HID Packet Injection Exploit

[Guest AlexisXB]

Hello,

 

 

Is the 'Microsoft L5V-00027 Sculpt Ergonomic Wireless Desktop Keyboard and Mouse' USB receiver still vulnerable to packet Injection? And if so, is there a link to a patched firmware update?

 

 

Affected Devices

 

• Sculpt Ergonomic mouse
  
• Wireless Mobile Mouse 4000
  
• Microsoft Wireless Mouse 5000
  
• 2.4GHz Transceiver v7.0 (USB ID 045e:0745)
  
• USB dongle model 1496 (USB ID 045e:07b2)
  
• USB dongle model 1461 (USB ID 045e:07a5)
  

 

 

Public Advisory

 

• Microsoft Sculpt Ergonomic mouse
  
• Microsoft Wireless Mobile Mouse 4000
  
• Microsoft Wireless Mouse 5000
  
• Microsoft 2.4GHz Transceiver v7.0 (USB ID 045e:0745)
  
• Microsoft USB dongle model 1496 (USB ID 045e:07b2)
  
• Microsoft USB dongle model 1461 (USB ID 045e:07a5)
  

 

 

It is unclear if L5V-00027 is vulnerable.

 

 

Regards,

 

 

Alexis

 

Continue reading...