CVE-2016-10761

MEDIUM

Logitech Unifying Receiver Firmware - Keystroke Injection via Encryption Bypass

Title source: llm
STIX 2.1

Description

Logitech Unifying devices before 2016-02-26 allow keystroke injection, bypassing encryption, aka MouseJack.

References (2)

Core 2
Core References
Third Party Advisory, US Government Resource x_refsource_misc
https://www.kb.cert.org/vuls/id/981271

Scores

CVSS v3 6.5
EPSS 0.0007
EPSS Percentile 22.4%
Attack Vector ADJACENT_NETWORK
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Details

CWE
CWE-74
Status published
Products (6)
logitech/k360_firmware
logitech/k400r_firmware
logitech/k750_firmware
logitech/k830_firmware
logitech/unifying_receiver_firmware 012.001.00019
logitech/unifying_receiver_firmware 012.003.00025
Published Jun 29, 2019
Tracked Since Feb 18, 2026