logitech Archives - CVE Vulnerability

CVE-2019-13055

Sun, 26 Feb 2023 06:30:07 +0000

Certain Logitech Unifying devices allow attackers to dump AES keys and addresses, leading to the capability of live decryption of Radio Frequency transmissions, as demonstrated by an attack against a Logitech K360 keyboard.

The post CVE-2019-13055 appeared first on CVE Vulnerability.

CVE-2019-13052

Sun, 26 Feb 2023 06:30:06 +0000

Logitech Unifying devices allow live decryption if the pairing of a keyboard to a receiver is sniffed.

The post CVE-2019-13052 appeared first on CVE Vulnerability.

CVE-2019-13053

Sun, 26 Feb 2023 06:30:06 +0000

Logitech Unifying devices allow keystroke injection, bypassing encryption. The attacker must press a “magic” key combination while sniffing cryptographic data from a Radio Frequency transmission. NOTE: this issue exists because of an incomplete fix for CVE-2016-10761.

The post CVE-2019-13053 appeared first on CVE Vulnerability.

CVE-2019-13054

Sun, 26 Feb 2023 06:30:06 +0000

The Logitech R500 presentation clicker allows attackers to determine the AES key, leading to keystroke injection. On Windows, any text may be injected by using ALT+NUMPAD input to bypass the restriction on the characters A through Z.

The post CVE-2019-13054 appeared first on CVE Vulnerability.

CVE-2019-12506

Sun, 26 Feb 2023 06:29:54 +0000

Due to unencrypted and unauthenticated data communication, the wireless presenter Logitech R700 Laser Presentation Remote R-R0010 is prone to keystroke injection attacks. Thus, an attacker is able to send arbitrary keystrokes to a victim’s computer system, e.g., to install malware when the target system is unattended. In this way, an attacker can remotely take control over the victim’s computer that is operated with an affected receiver of this device.

The post CVE-2019-12506 appeared first on CVE Vulnerability.