Certain Logitech Unifying devices allow attackers to dump AES keys and addresses, leading to the capability of live decryption of Radio Frequency transmissions, as demonstrated by an attack against a Logitech K360 keyboard.
Search vulnerabilities
CVE-2019-13055
CVSS 3.0 · 6.5 Medium
EPSS 1.0%
KEV · Not listed
Vendors
Products
CVE-2019-13053
Logitech Unifying devices allow keystroke injection, bypassing encryption. The attacker must press a "magic" key combination while sniffing cryptographic data from a Radio Frequency transmission. NOTE: this issue exists because of an incomplete fix for CVE-2016-10761.
CVSS 3.0 · 6.5 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2019-13052
Logitech Unifying devices allow live decryption if the pairing of a keyboard to a receiver is sniffed.
CVSS 3.0 · 6.5 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2016-10761
Logitech Unifying devices before 2016-02-26 allow keystroke injection, bypassing encryption, aka MouseJack.
CVSS 3.0 · 6.5 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
Page 1 of 1.