Unifying Receiver Firmware
by Logitech
CVEs (4)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-13055 | Med | 0.42 | 6.5 | 0.01 | Jun 29, 2019 | Certain Logitech Unifying devices allow attackers to dump AES keys and addresses, leading to the capability of live decryption of Radio Frequency transmissions, as demonstrated by an attack against a Logitech K360 keyboard. | ||
| CVE-2019-13053 | Med | 0.42 | 6.5 | 0.01 | Jun 29, 2019 | Logitech Unifying devices allow keystroke injection, bypassing encryption. The attacker must press a "magic" key combination while sniffing cryptographic data from a Radio Frequency transmission. NOTE: this issue exists because of an incomplete fix for CVE-2016-10761. | ||
| CVE-2019-13052 | Med | 0.42 | 6.5 | 0.01 | Jun 29, 2019 | Logitech Unifying devices allow live decryption if the pairing of a keyboard to a receiver is sniffed. | ||
| CVE-2016-10761 | Med | 0.42 | 6.5 | 0.01 | Jun 29, 2019 | Logitech Unifying devices before 2016-02-26 allow keystroke injection, bypassing encryption, aka MouseJack. |
- risk 0.42cvss 6.5epss 0.01
Certain Logitech Unifying devices allow attackers to dump AES keys and addresses, leading to the capability of live decryption of Radio Frequency transmissions, as demonstrated by an attack against a Logitech K360 keyboard.
- risk 0.42cvss 6.5epss 0.01
Logitech Unifying devices allow keystroke injection, bypassing encryption. The attacker must press a "magic" key combination while sniffing cryptographic data from a Radio Frequency transmission. NOTE: this issue exists because of an incomplete fix for CVE-2016-10761.
- risk 0.42cvss 6.5epss 0.01
Logitech Unifying devices allow live decryption if the pairing of a keyboard to a receiver is sniffed.
- risk 0.42cvss 6.5epss 0.01
Logitech Unifying devices before 2016-02-26 allow keystroke injection, bypassing encryption, aka MouseJack.