CVE-2022-35860: Corsair k63 Firmware

Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Missing AES encryption in Corsair K63 Wireless 3.1.3 allows physically proximate attackers to inject and sniff keystrokes via 2.4 GHz radio transmissions.

Affected products

• Corsair k63 Firmware: version 3.1.3 only

Published 2022-10-19. Last modified 2026-06-17.