cve/2019/CVE-2019-13053.md

CVE-2019-13053

Description

Logitech Unifying devices allow keystroke injection, bypassing encryption. The attacker must press a "magic" key combination while sniffing cryptographic data from a Radio Frequency transmission. NOTE: this issue exists because of an incomplete fix for CVE-2016-10761.

POC

Reference

• https://www.youtube.com/watch?v=EksyCO0DzYs

Github

• https://github.com/10ocs/LOGITaker-
• https://github.com/ARPSyndicate/cvemon
• https://github.com/OwenKruse/LOGITackerMouseComplete
• https://github.com/OwenKruse/LOGITackerRawHID
• https://github.com/RoganDawes/LOGITacker
• https://github.com/mame82/UnifyingVulnsDisclosureRepo