CVE-2019-12506: High severity logitech r700 laser presentation remote firmware vulnerability

Published Jun 7, 2019
·
Updated

Due to unencrypted and unauthenticated data communication, the wireless presenter Logitech R700 Laser Presentation Remote R-R0010 is prone to keystroke injection attacks. Thus, an attacker is able to send arbitrary keystrokes to a victim's computer system, e.g., to install malware when the target system is unattended. In this way, an attacker can remotely take control over the victim's computer that is operated with an affected receiver of this device.

Affected Software

3 affected components
Logitech R700 Laser Presentation Remote Firmware=wd802xm
Logitech R700 Laser Presentation Remote Firmware=wd904xm
Logitech R700 Laser Presentation Remote

Event History

Jun 7, 2019
CVE Published
via MITRE·08:26 PM
Data Sourced
via MITRE·08:26 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2019-12506?

CVE-2019-12506 has a high severity rating due to the potential for unauthorized keystroke injection.

2

How do I fix CVE-2019-12506?

To mitigate CVE-2019-12506, updating the firmware of the Logitech R700 Laser Presentation Remote is recommended.

3

What devices are affected by CVE-2019-12506?

CVE-2019-12506 affects the Logitech R700 Laser Presentation Remote, specifically firmware versions wd802xm and wd904xm.

4

What type of attack does CVE-2019-12506 enable?

CVE-2019-12506 enables keystroke injection attacks, allowing an attacker to send arbitrary keystrokes to a victim's computer.

5

Is user authentication necessary to exploit CVE-2019-12506?

No, CVE-2019-12506 does not require authentication, making it easier for attackers to exploit.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203