CVE-2019-13055: Infoleak
Certain Logitech Unifying devices allow attackers to dump AES keys and addresses, leading to the capability of live decryption of Radio Frequency transmissions, as demonstrated by an attack against a Logitech K360 keyboard.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-13055?
CVE-2019-13055 is considered a high-severity vulnerability as it allows attackers to decrypt radio frequency transmissions from affected Logitech devices.
How do I fix CVE-2019-13055?
To mitigate CVE-2019-13055, ensure that you update your Logitech Unifying Receiver firmware and check for any security patches from the manufacturer.
Which devices are affected by CVE-2019-13055?
CVE-2019-13055 affects certain Logitech Unifying devices, including the Logitech Unifying Receiver firmware and Logitech K360 keyboard firmware.
What type of attack is demonstrated by CVE-2019-13055?
CVE-2019-13055 demonstrates an attack scenario where attackers can dump AES keys resulting in the live decryption of radio frequency communications.
What are the potential impacts of CVE-2019-13055?
The potential impacts of CVE-2019-13055 include unauthorized access to keystrokes and sensitive data transmitted over radio frequency from vulnerable devices.