Windows 10: Microsoft USB Transceivers Vulnerable to MouseJack (HID Packet Injection)

I just started work for a community Credit Union and we have many Microsoft wireless keyboards, mice, and keyboard/mouse combos in use. From my investigation many of them are in the list of devices affected by the MouseJack HID Packet Injection vulnerability from 2016 (https://www.bastille.net/research/vulnerabilities/mousejack/affected-devices):
* Microsoft 2.4GHz Transceiver (USB ID 045E:0745)
* Microsoft USB Dongle Model 1461 (USB ID 045E:07A5)
* Microsoft USB Dongle Model 1496 (USB ID 045E:07B2)

In 2016 a Windows update was supplied that fixes the issue for mouse only devices (https://technet.microsoft.com/library/security/3152550). It does this by filtering out QWERTY key packets in keystroke communications issued from wireless mouse devices to receiving USB wireless dongles. This update does not correct the vulnerability for keyboards.

I have spent approximately 5 hours (13 calls) on the phone with Microsoft getting bounced from one department to another trying to find out if there is a firmware update for these three USB transceivers, and if so what version remediates this vulnerability. Not one Microsoft Support Rep could answer any of my questions and just shuffled me off to other departments. The last Microsoft Support Rep I spoke with suggested I post here on the Community forums. I do not know how the Community would have details that I could not get directly from Microsoft but I will give it a try.

The three posts I found on the Community forum about MouseJack are unresolved. They suggest that the vulnerability is minor and should be ignored, or just replace the keyboards/mice. As a Credit Union we cannot ignore this vulnerability and as a non-profit, wasting our Member's money when there is a fix is not acceptable.

So, my questions are:
1) Is there a firmware update to these devices that remediates the MouseJack vulnerability?
2) If YES: What firmware version does this?
3) If NO: Then we must replace these devices. What Microsoft keyboards / mice should I avoid as they are, or could be, vulnerable?

Thank you very much for your time.
Ryan

PS: Sorry if this is in the wrong category. There are no options for hardware or security / vulnerabilities so I selected Windows / Windows 10 / Devices and Drivers.

:)

 

MS Windows HID Functionality(Over USB) Code Execution Vulnerability - Any Resolution?

On my vulnerability scans I keep getting this vulnerability showing up:
MS Windows HID Functionality(Over USB) Code Execution Vulnerability. I have found a few workarounds related to disabling USB, but I was wondering if there was a fix for this vulnerability so it would not appear in vulnerability scans

 

Microsoft Sculpt Ergonomic Keyboard and Mouse USB transceivers

I have a set of those keyboard and mouse. My mouse got broken so i bought a new one. I have 2 USB transceivers now. Is there anyway to program new or old usb transceiver through windows to connect either new mouse to old usb transceiver or old keyboard
to new usb transceiver so as a result i will use only one usb transceiver for 2 devices as i used to before the old mouse got broken? Thanks in advance.

 

Lost of usb transceiver for wireless Microsoft Arc Keyboard.

I've lost my usb transceiver dongle for my wireless Microsoft Arc Keyboard. Can I get a replacement for it without having to get a whole new keyboard just for that one transceiver.