#Logitech dongle Patch#

'Additionally, there is no need to discover the device 'on air' to carry out a keystroke injection attack, as the address is pre-known from the extraction (targeted attack possible, the actual device doesn't have to be in range - only the receiver).' This applies to all encrypted Unifying devices with keyboard capabilities (f.e.

'With the stolen key, the attacker is able to inject arbitrary keystrokes (active), as well as to eavesdrop and live decrypt keyboard input remotely (passive).

#Logitech dongle Patch#

TheВ CVE-2019-13054 (impacts Logitech R500,В Logitech SPOTLIGHT) and CVE-2019-13055 (affects all encrypted Unifying devices with keyboard capabilities) security flawsВ that Logitech plans to patch allow attackers withВ physical access to the targeted machine to 'actively obtain link encryption keys by dumping them from receiver of Unifying devices.'Д®xploiting CVE-2019-13055 was demonstrated by MengsВ in a demo attack against a Logitech K360 keyboard through which he was able toВ dump AES keys and addresses from all paired devices, subsequently allowing for eavesdropping on and decryptingВ of Radio Frequency (RF) transmissions in real-time.