Update Your Logitech Wireless Dongle Right Now

toggle-button

Logitech wireless receiver

Logitech's Unifying Receiver (wireless dongle) is vulnerable to some newly discovered vulnerabilities, updating the firmware will patch the flaws.

If you use a Logitech Unifying Receiver (also knows as the wireless dongle) download and install the latest firmware update to protect against vulnerabilities. Unless you've updated the firmware, the Logitech Unifying Receiver is still vulnerable to an issue discovered in 2016 as well as some newly discovered vulnerabilities.

Logitech didn't recall the Unifying Receiver back in 2016 when the hack called "Mousejack" appeared. Many of the Unifying Receivers were still on the market, though Logitech started releasing updated dongles sold with mice, keyboard and stand alone receivers. Not long after the discovery, Logitech issued a firmware update but it wasn't widely known and the firmware isn't all that easy to find on the site. If you didn't update the firmware then (and most of us didn't know about it) now is a good time to get the update as new vulnerabilities have been discovered.

A Logitech wireless mouse I purchased last year didn't have an updated Unifying Receiver included so I wouldn't assume newly purchased items have updated firmware. If you have any extra Logitech wireless dongles around (I have several) you may want to update them.

If you use a Logitech wireless device you've probably installed a program containing the drivers and software to configure the device such as SetPoint for Logitech mice. The firmware update for the Unifying Receiver isn't included in the device software and isn't included in updates to the Unifying Receiver software - it needs to be downloaded and installed separately.

Logitech isn't the only company that's been affected; any device that uses the same Nordic and Texas Instruments chips and firmware for wireless receivers are impacted, including devices from Microsoft, Dell, HP, and Lenovo. If you use a wireless device from one of those companies, you might want to check if the firmware can be updated. Logitech lets you update the firmware on the wireless dongle. You can find a list of all manufacturers affected devices here: https://www.bastille.net/research/vulnerabilities/mousejack/affected-dev...

Logitech's announcement (including links to the firmware update) are here: Logitech Response to Research Findings.

I've added direct download links to the Unifying Receiver firmware update for PC, Mac and the G900 gaming mouse:

Mac: https://aws13-customer-care-assets.s3.amazonaws.com/Software/SecureDFU/Mac/SecureDFU.zip

PC: https://aws13-customer-care-assets.s3.amazonaws.com/Software/SecureDFU/Win/SecureDFU_48.exe

G900 gaming mousehttp://www.logitech.com/pub/techsupport/gaming/G900Update_1.5.23.exe

Logitech notes that if you have the K780 multi-device wireless keyboard, K375s multi-device keyboard, wireless touch keyboard K400 plus, MK850 performance or illuminated living-room keyboard K830 connected with your Unifying receiver, the tool will guide you to update the firmware on the keyboard as well. 


(h/t betanews)

 

Please rate this article: 

Your rating: None
4.652175
Average: 4.7 (23 votes)
toggle-button

Comments

Thank you for this information! I have a Dell mouse, and couldn't find an update on their website (lots of others in the series, but not mine), so called them. I was told that since my laptop is an Acer, I have to contact Acer to update my Dell mouse. This seems very strange to me.

Thanks again! My mouse isn't in the list....phew!

That's good news. :)

Hmmmm. I'm no expert but it seems to me that since it's the Logitech Unifying Receiver that's getting the firmware update, it wouldn't impact which Logitech mouse or keyboard was being used. I would think Dell, Microsoft, HP and Lenovo would be responsible for fixing the issue.¯\_(ツ)_/¯

 

That seems to be common sense to me, but these days common sense isn't always the way things are done. Sigh

Nothing for Linux. Again. Typical for Logitech.

There was comment on one the ubuntu forums recently that address this with a way to do it.

Thanks. I'll look into it. :)

It's discouraging. :(

One solution I've seen is to install the update by inserting the dongle in a Widnows computer and run the update from there.