Logitech Unifying Receiver Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Logitech Unifying Receiver Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2016-10761 — CVSS 6.5 (medium): Logitech Unifying devices before 2016-02-26 allow keystroke injection, bypassing encryption, aka MouseJack.
• CVE-2019-13052 — CVSS 6.5 (medium): Logitech Unifying devices allow live decryption if the pairing of a keyboard to a receiver is sniffed.
• CVE-2019-13053 — CVSS 6.5 (medium): Logitech Unifying devices allow keystroke injection, bypassing encryption. The attacker must press a "magic" key combination while sniffing…
• CVE-2019-13055 — CVSS 6.5 (medium): Certain Logitech Unifying devices allow attackers to dump AES keys and addresses, leading to the capability of live decryption of Radio…