Radio Frequency Decryption Vulnerability in Logitech Unifying Devices
CVE-2019-13055

6.5MEDIUM

Key Information:

Vendor

Logitech

Status
Unifying Receiver Firmware
Vendor
CVE Published:
29 June 2019

What is CVE-2019-13055?

Certain Logitech Unifying devices are susceptible to an attack that enables unauthorized access to sensitive AES keys and addresses. This vulnerability allows attackers to perform live decryption of Radio Frequency transmissions, compromising the security of devices such as the Logitech K360 keyboard. The exploitation of this flaw highlights significant risks associated with wireless peripherals, emphasizing the need for robust security measures.

References

https://www.youtube.com/watch?v=5z_PEZ5PyeA
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.