CVE-2019-12503 - CVE House
Back to Database
Status published Critical CVE-2019-12503

Due to unencrypted and unauthenticated data communication, the wireless barcode...

Vulnerability Description

Due to unencrypted and unauthenticated data communication, the wireless barcode scanner Inateck BCST-60 is prone to keystroke injection attacks. Thus, an attacker is able to send arbitrary keystrokes to a victim's computer system, e.g., to install malware when the target system is unattended. In this way, an attacker can remotely take control over the victim's computer that is operated with an affected receiver of this device.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-12503

Credits & Attribution

No credits recorded in the NVD database.

References

More from inateck

View All →
CVE-2019-12505
Due to unencrypted and unauthenticated data communication, the wireless presenter...
High 8.8
CVE-2019-12504
Due to unencrypted and unauthenticated data communication, the wireless presenter...
High 8.8

Affected Vendor

Affected Software

bcst-60 firmware
Vulnerable Versions:
Unknown

Timeline

Official Publish: December 2nd, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.