Permalink
Switch branches/tags
Nothing to show
Find file Copy path
Fetching contributors…
Cannot retrieve contributors at this time
58 lines (28 sloc) 991 Bytes
Bastille Threat Research Team Tracking Number 2
Document version: 1.1
Cert VU#981271
http://www.kb.cert.org/vuls/id/981271
Overview
A vulnerability has been discovered in the way Logitech Unifying dongles process
received RF packets, allowing keystroke injection that bypasses encryption.
Impact
This vulnerability allows an attacker to inject keystrokes into a computer equipped
with a Logitech Unifying wireless keyboard.
Affected Platforms
The following products have been tested and shown to be affected:
- Logitech K400r
- Logitech K360
- Logitech K750
- Logitech K830
- Logitech Unifying dongle (USB ID 046d:c52b)
- firmware version 012.001.00019
- firmware version 012.003.00025
Mitigation
Exploiting this vulnerability involves transmitting RF packets to a Logitech Unifying
dongle, which requires physical proximity to the target computer.
More Information
https://www.mousejack.com/
Credits
Marc Newlin
About Bastille
https://www.bastille.net/