CVE-2019-13055

Certain Logitech Unifying devices allow attackers to dump AES keys and addresses, leading to the capability of live decryption of Radio Frequency transmissions, as demonstrated by an attack against a Logitech K360 keyboard.
References
Link Resource
https://www.youtube.com/watch?v=5z_PEZ5PyeA Exploit Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:logitech:unifying_receiver_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:logitech:unifying_receiver:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:logitech:k360_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:logitech:k360:-:*:*:*:*:*:*:*

Information

Published : 2019-06-29 13:15

Updated : 2019-07-08 07:58


NVD link : CVE-2019-13055

Mitre link : CVE-2019-13055


JSON object : View

CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

Advertisement

dedicated server usa

Products Affected

logitech

  • unifying_receiver
  • unifying_receiver_firmware
  • k360_firmware
  • k360