Vulnerabilities > Logitech > Medium

DATE CVE VULNERABILITY TITLE RISK
2019-06-29 CVE-2019-13055 Information Exposure vulnerability in Logitech K360 Firmware and Unifying Receiver Firmware
Certain Logitech Unifying devices allow attackers to dump AES keys and addresses, leading to the capability of live decryption of Radio Frequency transmissions, as demonstrated by an attack against a Logitech K360 keyboard.
low complexity
logitech CWE-200
6.5
2019-06-29 CVE-2019-13054 Insufficiently Protected Credentials vulnerability in Logitech R500 Firmware
The Logitech R500 presentation clicker allows attackers to determine the AES key, leading to keystroke injection.
low complexity
logitech CWE-522
6.5
2019-06-29 CVE-2019-13053 Unspecified vulnerability in Logitech Unifying Receiver Firmware
Logitech Unifying devices allow keystroke injection, bypassing encryption.
low complexity
logitech
6.5
2019-06-29 CVE-2019-13052 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Logitech Unifying Receiver Firmware
Logitech Unifying devices allow live decryption if the pairing of a keyboard to a receiver is sniffed.
low complexity
logitech CWE-327
6.5
2019-06-29 CVE-2016-10761 Injection vulnerability in Logitech products
Logitech Unifying devices before 2016-02-26 allow keystroke injection, bypassing encryption, aka MouseJack.
low complexity
logitech CWE-74
6.5
2017-11-10 CVE-2017-16568 Cross-site Scripting vulnerability in Logitech Media Server 7.9.0
Cross-site scripting (XSS) vulnerability in Logitech Media Server 7.9.0 allows remote attackers to inject arbitrary web script or HTML via a radio URL.
network
low complexity
logitech CWE-79
5.4
2017-11-10 CVE-2017-16567 Cross-site Scripting vulnerability in Logitech Media Server 7.9.0
Cross-site scripting (XSS) vulnerability in Logitech Media Server 7.9.0 allows remote attackers to inject arbitrary web script or HTML via a "favorite."
network
low complexity
logitech CWE-79
5.4
2017-10-23 CVE-2017-15687 Cross-site Scripting vulnerability in Logitech Media Server
DOM Based Cross Site Scripting (XSS) exists in Logitech Media Server 7.7.1, 7.7.2, 7.7.3, 7.7.5, 7.7.6, 7.9.0, and 7.9.1 via a crafted URI.
network
low complexity
logitech CWE-79
6.1
2016-08-02 CVE-2016-6257 Cryptographic Issues vulnerability in multiple products
The firmware in Lenovo Ultraslim dongles, as used with Lenovo Liteon SK-8861, Ultraslim Wireless, and Silver Silk keyboards and Liteon ZTM600 and Ultraslim Wireless mice, does not enforce incrementing AES counters, which allows remote attackers to inject encrypted keyboard input into the system by leveraging proximity to the dongle, aka a "KeyJack injection attack."
6.5