CVE-2019-12506 - CVE House
Back to Database
Status published High CVE-2019-12506

Due to unencrypted and unauthenticated data communication, the wireless presenter...

Vulnerability Description

Due to unencrypted and unauthenticated data communication, the wireless presenter Logitech R700 Laser Presentation Remote R-R0010 is prone to keystroke injection attacks. Thus, an attacker is able to send arbitrary keystrokes to a victim's computer system, e.g., to install malware when the target system is unattended. In this way, an attacker can remotely take control over the victim's computer that is operated with an affected receiver of this device.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-12506

Credits & Attribution

No credits recorded in the NVD database.

References

More from logitech

View All →
CVE-2022-36263
StreamLabs Desktop Application 1.9.0 is vulnerable to Incorrect Access Control...
High 7.3
CVE-2021-38547
Logitech Z120 and S120 speakers through 2021-08-09 allow remote attackers...
Medium 5.9
CVE-2019-13055
Certain Logitech Unifying devices allow attackers to dump AES keys...
Medium 6.5
CVE-2019-13054
The Logitech R500 presentation clicker allows attackers to determine the...
Medium 6.5
CVE-2019-13053
Logitech Unifying devices allow keystroke injection, bypassing encryption. The attacker...
Medium 6.5

Affected Vendor

Affected Software

r700 laser presentation remote firmware
Vulnerable Versions:
wd802xm, wd904xm

Timeline

Official Publish: June 7th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.