Skip to content
Noroxi

Logitech records

37 published records for vendor logitech.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 2.7%
Pre-auth RCE
5
With a fix record
2.7%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 21
  5. 22
  6. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

Bug bounty scope

The product’s vendor appears in a public program. Matched by name; verify the scope text in the program.

All records

37 records
  • CVE-2012-1250
    42Plan

    Logitec LAN-W300N/R routers with firmware before 2.27 do not properly restrict login access, which allows remote attackers to obtain adminis

    CriticalCVSS 10.0No exploitEPSS 6%

    logitech · lan-w300n\/ru2 firmwareJun 4, 2012

  • CVE-2008-0956
    40Plan

    Multiple stack-based buffer overflows in the BackWeb Lite Install Runner ActiveX control in the BackWeb Web Package ActiveX object in LiteIn

    CriticalCVSS 9.3No exploitEPSS 8%

    backweb · backwebJun 11, 2008

  • CVE-2018-15723
    40Plan

    The Logitech Harmony Hub before version 4.15.206 is vulnerable to application level command injection via crafted HTTP request.

    CriticalCVSS 9.8No exploitEPSS 4%

    logitech · harmony hub firmwareDec 20, 2018

  • CVE-2018-15721
    40Plan

    The XMPP server in Logitech Harmony Hub before version 4.15.206 is vulnerable to authentication bypass via a crafted XMPP request.

    CriticalCVSS 9.8No exploitEPSS 2%

    logitech · harmony hub firmwareDec 20, 2018

  • CVE-2018-15720
    39Monitor

    Logitech Harmony Hub before version 4.15.206 contained two hard-coded accounts in the XMPP server that gave remote users access to the local

    CriticalCVSS 9.8No exploitEPSS 1%

    logitech · harmony hub firmwareDec 20, 2018

  • CVE-2024-2537
    39Monitor

    Electron Code Injection in Logi Tune macOS Application

    CriticalCVSS 9.8No exploitEPSS 0%

    logitech · logi tuneMar 15, 2024

  • CVE-2007-2918
    37Monitor

    Multiple stack-based buffer overflows in ActiveX controls (1) VibeC in (a) vibecontrol.dll, (2) CallManager and (3) ViewerClient in (b) Star

    MediumCVSS 6.8WeaponizedEPSS 34%

    logitech · videocallMay 31, 2007

  • CVE-2019-12506
    35Monitor

    Due to unencrypted and unauthenticated data communication, the wireless presenter Logitech R700 Laser Presentation Remote R-R0010 is prone t

    HighCVSS 8.8No exploitEPSS 1%

    logitech · r700 laser presentation remote firmwareJun 7, 2019

  • CVE-2022-0916
    35Monitor

    Broken authentication on Logitech Options due to misvalidation of Oauth state parameter

    HighCVSS 8.8No exploitEPSS 0%

    logitech · optionsMay 3, 2022

  • CVE-2018-15722
    32Monitor

    The Logitech Harmony Hub before version 4.15.206 is vulnerable to OS command injection via the time update request.

    HighCVSS 8.1No exploitEPSS 2%

    logitech · harmony hub firmwareDec 20, 2018

  • CVE-2001-0737
    31Monitor

    A long 'synch' delay in Logitech wireless mice and keyboard receivers allows a remote attacker to hijack connections via a man-in-the-middle

    HighCVSS 7.5No exploitEPSS 2%

    logitech · cordless freedomOct 18, 2001

  • CVE-2018-0620
    31Monitor

    Untrusted search path vulnerability in LOGICOOL Game Software versions before 8.87.116 allows an attacker to gain privileges via a Trojan ho

    HighCVSS 7.8No exploitEPSS 1%

    logitech · game softwareJul 26, 2018

  • CVE-2018-0621
    31Monitor

    Untrusted search path vulnerability in LOGICOOL CONNECTION UTILITY SOFTWARE versions before 2.30.9 allows an attacker to gain privileges via

    HighCVSS 7.8No exploitEPSS 1%

    logitech · connection utility softwareJul 26, 2018

  • CVE-2022-36263
    29Monitor

    StreamLabs Desktop Application 1.9.0 is vulnerable to Incorrect Access Control via obs64.exe.

    HighCVSS 7.3No exploitEPSS 0%

    logitech · streamlabs desktopAug 19, 2022

  • CVE-2022-0915
    28Monitor

    Logitech Sync desktop application prior to 2.4.574 - TOCTOU during installation leads to privelege escalation

    HighCVSS 7.0No exploitEPSS 0%

    logitech · syncApr 12, 2022

  • CVE-2021-20640
    27Monitor

    Buffer overflow vulnerability in LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute an arbitrary OS command

    MediumCVSS 6.8No exploitEPSS 1%

    logitech · lan-w300n\/pgrb firmwareFeb 12, 2021

  • CVE-2021-20638
    27Monitor

    LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors.

    MediumCVSS 6.8No exploitEPSS 0%

    logitech · lan-w300n\/pgrb firmwareFeb 12, 2021

  • CVE-2021-20639
    27Monitor

    LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors.

    MediumCVSS 6.8No exploitEPSS 0%

    logitech · lan-w300n\/pgrb firmwareFeb 12, 2021

  • CVE-2019-13055
    26Monitor

    Certain Logitech Unifying devices allow attackers to dump AES keys and addresses, leading to the capability of live decryption of Radio Freq

    MediumCVSS 6.5No exploitEPSS 1%

    logitech · unifying receiver firmwareJun 29, 2019

  • CVE-2021-20642
    26Monitor

    Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/RS allows a remote attacker to cause a denial-of-service (DoS) con

    MediumCVSS 6.5No exploitEPSS 1%

    logitech · lan-w300n\/rs firmwareFeb 12, 2021

  • CVE-2021-20637
    26Monitor

    Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/PR5B allows a remote attacker to cause a denial-of-service (DoS) c

    MediumCVSS 6.5No exploitEPSS 1%

    logitech · lan-w300n\/pr5b firmwareFeb 12, 2021

  • CVE-2016-6257
    26Monitor

    The firmware in Lenovo Ultraslim dongles, as used with Lenovo Liteon SK-8861, Ultraslim Wireless, and Silver Silk keyboards and Liteon ZTM60

    MediumCVSS 6.5No exploitEPSS 1%

    lenovo · ultraslim firmwareAug 2, 2016

  • CVE-2019-13054
    26Monitor

    The Logitech R500 presentation clicker allows attackers to determine the AES key, leading to keystroke injection.

    MediumCVSS 6.5No exploitEPSS 1%

    logitech · r500 firmwareJun 29, 2019

  • CVE-2016-10761
    26Monitor

    Logitech Unifying devices before 2016-02-26 allow keystroke injection, bypassing encryption, aka MouseJack.

    MediumCVSS 6.5No exploitEPSS 1%

    logitech · k400r firmwareJun 29, 2019

  • CVE-2019-13052
    26Monitor

    Logitech Unifying devices allow live decryption if the pairing of a keyboard to a receiver is sniffed.

    MediumCVSS 6.5No exploitEPSS 1%

    logitech · unifying receiver firmwareJun 29, 2019