CVE-2019-13055

Certain Logitech Unifying devices allow attackers to dump AES keys and addresses, leading to the capability of live decryption of Radio Frequency transmissions, as demonstrated by an attack against a Logitech K360 keyboard.
References
Link Resource
https://www.youtube.com/watch?v=5z_PEZ5PyeA Exploit Third Party Advisory
https://www.youtube.com/watch?v=5z_PEZ5PyeA Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:logitech:unifying_receiver_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:logitech:unifying_receiver:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:logitech:k360_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:logitech:k360:-:*:*:*:*:*:*:*

History

21 Nov 2024, 04:24

Type Values Removed Values Added
References () https://www.youtube.com/watch?v=5z_PEZ5PyeA - Exploit, Third Party Advisory () https://www.youtube.com/watch?v=5z_PEZ5PyeA - Exploit, Third Party Advisory

Information

Published : 2019-06-29 20:15

Updated : 2024-11-21 04:24


NVD link : CVE-2019-13055

Mitre link : CVE-2019-13055

CVE.ORG link : CVE-2019-13055


JSON object : View

Products Affected

logitech

  • unifying_receiver
  • k360
  • k360_firmware
  • unifying_receiver_firmware
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor