CVE-2019-13054: Logitech r500 Firmware

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

The Logitech R500 presentation clicker allows attackers to determine the AES key, leading to keystroke injection. On Windows, any text may be injected by using ALT+NUMPAD input to bypass the restriction on the characters A through Z.

Affected products

• Logitech r500 Firmware: affected versions not specified

Published 2019-06-29. Last modified 2026-06-17.