{"id":97936,"date":"2019-07-26T21:29:06","date_gmt":"2019-07-27T01:29:06","guid":{"rendered":"http:\/\/rbach.net\/index.php\/"},"modified":"2021-08-18T16:40:53","modified_gmt":"2021-08-18T20:40:53","slug":"fix-your-dongle-today","status":"publish","type":"post","link":"https:\/\/rbach.net\/index.php\/fix-your-dongle-today\/","title":{"rendered":"Fix Your Dongle – Today"},"content":{"rendered":"

\"Fix<\/a>If you use a Logitech<\/strong><\/a> (LOGI<\/a>) wireless mouse<\/a>, keyboard<\/strong> or other device fix your dongle<\/strong>! The Logitech wireless dongle<\/strong> (officially Unifying Receiver) is vulnerable<\/strong> to an issue discovered in 2016 as well as newly discovered vulnerabilities unless you’ve updated the firmware. Download and install the latest firmware<\/a><\/strong> update to protect against vulnerabilities.<\/p>\n

Mousejack attach<\/h3>\n

\"Logitech<\/a>Affected Logitech wireless devices are vulnerable to a hack called “Mousejack<\/a><\/strong>.” Mousejack, (CVE-2016-10761) was first reported in 2016<\/strong> by IoT security firm Bastille Networks, Inc<\/a>. The Mousejack attach works<\/a> by sending malicious radio signals<\/strong> (packets) wirelessly to an unsuspecting user through Logitech Unifying wireless technology. Logitech only partially fixed<\/a> the hole (Cert VU#981271<\/a>) in 2016. Mousejack uses the vulnerable Logitech Unifying receiver<\/strong> to intercept and inject unencrypted signals within a range of about 100 meters<\/strong>.<\/p>\n

Incomplete fix<\/h3>\n

Logitech did not recall the Unifying Receiver back in 2016 when Mousejack<\/a> appeared. Four new vulnerabilities<\/strong> were discovered in 2019<\/strong>. The new vulnerabilities<\/strong> are based on the incomplete 2016 fix. Logitech will only fix two of the four vulnerabilities, the others will remain unpatched. The vulnerabilities<\/strong> are logged as:<\/p>\n