cve/2019/CVE-2019-13054.md

CVE-2019-13054

Description

The Logitech R500 presentation clicker allows attackers to determine the AES key, leading to keystroke injection. On Windows, any text may be injected by using ALT+NUMPAD input to bypass the restriction on the characters A through Z.

POC

Reference

No PoCs from references.

Github

• https://github.com/10ocs/LOGITaker-
• https://github.com/OwenKruse/LOGITackerMouseComplete
• https://github.com/OwenKruse/LOGITackerRawHID
• https://github.com/RoganDawes/LOGITacker
• https://github.com/RoganDawes/munifying
• https://github.com/RoganDawes/munifying-web
• https://github.com/mame82/UnifyingVulnsDisclosureRepo
• https://github.com/mame82/munifying_pre_release