Logitech Unifying devices allow keystroke injection, bypassing encryption. The attacker must press a "magic" key combination while sniffing cryptographic data from a Radio Frequency transmission. NOTE: this issue exists because of an incomplete fix for CVE-2016-10761.
References
Link | Resource |
---|---|
https://www.youtube.com/watch?v=EksyCO0DzYs | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2019-06-29 13:15
Updated : 2020-08-24 10:37
NVD link : CVE-2019-13053
Mitre link : CVE-2019-13053
JSON object : View
CWE
Products Affected
logitech
- unifying_receiver
- unifying_receiver_firmware