18 matches found
EUVD-2019-4615
Malware in sbrugna...
EUVD-2019-4613
Malware in sbrugna...
CVE-2019-13052
Logitech Unifying devices allow live decryption if the pairing of a keyboard to a receiver is sniffed...
CVE-2016-10761
Logitech Unifying devices before 2016-02-26 allow keystroke injection, bypassing encryption, aka MouseJack...
CVE-2016-10761
Logitech Unifying devices before 2016-02-26 allow keystroke injection, bypassing encryption, aka MouseJack...
CVE-2019-13053
Logitech Unifying devices allow keystroke injection, bypassing encryption. The attacker must press a "magic" key combination while sniffing cryptographic data from a Radio Frequency transmission. NOTE: this issue exists because of an incomplete fix for CVE-2016-10761...
CVE-2019-13055
Logitech Unifying devices are affected by CVE-2019-13055, where an attacker can dump AES keys and addresses, enabling live decryption of RF transmissions (demonstrated against a K360 keyboard). The connected sources corroborate information disclosure via the Unifying receiver; root cause and affe...
CVE-2019-13055
Certain Logitech Unifying devices allow attackers to dump AES keys and addresses, leading to the capability of live decryption of Radio Frequency transmissions, as demonstrated by an attack against a Logitech K360 keyboard...
CVE-2019-13053
CVE-2019-13053 describes a keystroke injection vulnerability in Logitech Unifying devices. The issue allows an attacker to inject keystrokes and bypass encryption by pressing a specific “magic” key combination while listening to the RF transmission. The vulnerability is noted as a consequence of ...
CVE-2016-10761
CVE-2016-10761 affects Logitech Unifying devices prior to 2016-02-26, enabling keystroke injection and bypassing encryption (MouseJack). The NVD entry lists low to medium severity (CVSS v2 base 3.3, CVSS v3 base 6.5) with adjacent, low-complexity exploitation and no user interaction required. Pub...
CVE-2016-10761
Logitech Unifying devices before 2016-02-26 allow keystroke injection, bypassing encryption, aka MouseJack...
CVE-2019-13052: Use of a Broken or Risky Cryptographic Algorithm
Logitech Unifying devices allow live decryption if the pairing of a keyboard to a receiver is sniffed...
PT-2019-7557
Name of the Vulnerable Software and Affected Versions Logitech Unifying devices versions prior to 2016-02-26 Description The issue allows keystroke injection, bypassing encryption, and is also known as MouseJack. Recommendations For Logitech Unifying devices versions prior to 2016-02-26, update t...
CVE-2016-10761: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Logitech Unifying devices before 2016-02-26 allow keystroke injection, bypassing encryption, aka MouseJack...
PT-2019-13099
Name of the Vulnerable Software and Affected Versions Logitech Unifying devices affected versions not specified Description The issue allows keystroke injection, bypassing encryption. An attacker must press a specific key combination while sniffing cryptographic data from a Radio Frequency...
CVE-2019-13053: Undefined Security Weakness
Logitech Unifying devices allow keystroke injection, bypassing encryption. The attacker must press a "magic" key combination while sniffing cryptographic data from a Radio Frequency transmission. NOTE: this issue exists because of an incomplete fix for CVE-2016-10761...
PT-2019-13098
Name of the Vulnerable Software and Affected Versions Logitech Unifying devices affected versions not specified Description The issue allows live decryption of data if the pairing process of a keyboard to a receiver is intercepted. Recommendations At the moment, there is no information about a...
PT-2019-13101
Name of the Vulnerable Software and Affected Versions Logitech Unifying devices affected versions not specified Description The issue allows attackers to dump AES keys and addresses, enabling them to perform live decryption of Radio Frequency transmissions. This has been demonstrated through an...