CVE-2019-13054

6.5 mediumEPSS 0.8%

Medium (6.5) in logitech r500 firmware. EPSS 0.8% chance of exploitation in the next 30 days.

The Logitech R500 presentation clicker allows attackers to determine the AES key, leading to keystroke injection. On Windows, any text may be injected by using ALT+NUMPAD input to bypass the restriction on the characters A through Z.

Severity

CVSS 3.0

6.5 medium

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWE: CWE-522
Published: 2019-06-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

logitech:r500_firmware

References

https://twitter.com/mame82/status/1143093313924452353
https://twitter.com/mame82/status/1143093313924452353

Check your stack JSON