Sustainability Navigation

Logitech Unifying Receiver Update

Pinned

Comments

113 comments

  • Iain S

    What's the simplest way to check if your devices are susceptible? Could I use a Crazyradio transceiver to scan all devices attached to my company's computers or is it a manual process? I'd rather bin any affected adapters rather than run the risk of exploits.

    0
    Comment actions Permalink
  • Jeff Jackson

    @lain7107

    You can see a non-exhaustive list of MouseJack-vulnerable devices at https://www.bastille.net/research/vulnerabilities/mousejack/affected-devices

    In addition to what's listed I'd say any of their wireless products purchased prior to .. at least June 2017. Give that some time to get rid of old stock and have new stock on the shelves.

    Or just look at what the updated firmware numbers are, open... was it setpoint or the unifying pairing software, and look at the dongle's current fw number. And if it's not one of those it's vulnerable.

    I just bought my vulnerable non-unifying mouse in January of this year. So, I think all non-unifying receivers are probably vulnerable.

    My SO bought a k400 within the past month - also from the local Target - And the receiver came with the patch. So there's that at least.

    @Mark: I'm glad they finally know about the issue, for sure. I've just kinda been thinking they've been pointedly ignoring non-unifying because it'd be even more difficult to push updates for all of those too. Or maybe they can't be updated because they're afraid one would be able to flash a non-unifying dongle with a unifying firmware or something.

    They definitely should be freaking out since this is a huge vulnerability and I'm sure hundreds of thousands of vulnerable devices are already out in the wild. The only reason they're still getting sales is because major news networks haven't made segments about it, so the people in-the-know are limited.

    1
    Comment actions Permalink
  • Iain S

    @Jeff Jackson

    We make use of lots of equipment in a number of offices, and currently have a flexible BYOD policy for input devices, so MouseJack is a concern for us. Being able to periodially sweep an entire office as part of a security review will allow us to check for potential issues without needing to pysically inspect each device. 

    While there do appear to be some problems with Logitech's process, at least the Unifying adaptors are patchable. IMO the bigger problem appears to be with non-Unifying devices which cannot be fixed, only binned.

    I guess the only way to be sure would be to try and run the exploit myself.

    0
    Comment actions Permalink
  • Janne Kujanpää

    Looks like unifying software got update and there is now update firmware button. SADLY:

    1. Newest version crash on OS X
    2. Windows version failed to update dongle firmware from 012.001.00019 to 012.008.00030. No error messages it seems to fail do its job properly.

    Not worth of updating because of those two and because there is not fixed firmware available for the newest vulnerability.

    1
    Comment actions Permalink
  • Olav R.4346

    We're mid august. Any ETA for the new firmware?

    0
    Comment actions Permalink
  • Иван Аганин

    I want to know if I can hide logi options window automatically as it runs when I start my laptop with the program in autorun? Meanwhile I have to press the cross each time I start Windows
    thx

    -1
    Comment actions Permalink
  • Noah Graubart

    Ever since updating the firmware on my receiver, my mouse and keyboard no longer pair.  I have treid them with a friend's receiver, and they work fine.  Please help me downgrade my firmware to the previous version.

    3
    Comment actions Permalink
  • geomguy

    Hope the Aug update will fix my problem.

    Must Unplug Receiver Every Restart/Sleep

    M570 and M510 ... must unplug/plug-in receiver/dongle every time before they show up in Control Center.

    This means if I don't do that my Configuration settings don't work...

    This is new with my new Mac Mini w/OS 10.14.5 and .6

    Did not do this with my MB Pro (2016) with 10.14.5

    Difference between my Mac's may be the new T2 chip.

     

    0
    Comment actions Permalink
  • Yves Hanselmann

    Hey everyone

    I have an other Problem which would be a great risk.

    We cant silent install the newer Versions of the Logitech Options Software.

    The older ones we could silent install but at some Point they scrapt this feature.

    How do you guys make sure that the software is up to date?

    We have 150 PC with the Software on in and manual update is not an Option.

    Thanks for the reply.

    1
    Comment actions Permalink
  • Kirill Boronin

    Yves, I've used GPO logon script.

    0
    Comment actions Permalink
  • Yves Hanselmann

    Hello Kirill

    Thanks for the reply. 

    Can you explain me what you do with the logon script?

    The Install file has no Silent key (/S /Silent /qn, ,...) and i don't know how to make it silent.

    (Support didn't answer me 5 Times and on the last Ticket about this they reply after 3 Weeks with the Message "It doesnt work" )

    Thank you very much 

    really appreciate it

    1
    Comment actions Permalink
  • Kirill Boronin

    Ah, sorry, didn't notice you speak of different subject.

    I talked about updating receiver fw with logon script.

    For software installation we use SCCM. There are other options, of course.

    0
    Comment actions Permalink
  • Toomas Mölder

    We're in end of August (Aug 27th). Any ETA for the new firmware?

    4
    Comment actions Permalink
  • logi_tim

    I'm also very interested in the ETA for the new firmware.

    Why is there no enterprise updated for Logitech Options software? That requires interactive admin install? Who let's their users be admins these days?

    1
    Comment actions Permalink
  • Iain S

    The latest 012.008.00032 update is no use to me, my T400 is still only partially functional since I originally updated to the 012.008.00030 firmware.

    0
    Comment actions Permalink
  • Jeff Jackson

    Hello, it's me again.

    I was hoping Logi Moderator could clarify Logi's position on non-unifying receivers. As non-unifying products may make more sense to some consumers. They may think "Unifying, what's that? Why doesn't this other one have unifying? Well this other one that doesn't have unifying has a neat design that I like, so I'll get that." Not knowing that buying a non-unifying product will make their computer vulnerable.

    Or they may know what Unifying is, and decide they don't need it because they only need the one peripheral. 

    0
    Comment actions Permalink
  • mazen

    logitech please help me i lost me Logitech Unifying Receiver for g pro i can't use my mouse with out that receiver please help me 

    0
    Comment actions Permalink
  • Jarno Suni

    Unfortunately the updated firmware is not available in Linux Vendor Firmware Service (LVFS), yet.

    0
    Comment actions Permalink
  • Nils

    After running the Firmware Update Tool my K400 Plus is now at firmware version 063.002.00016, according to Logitech Options. Is this the firmware with the security fixes?

    I'm asking because the article says the update was released 28th August, yet the update tool has last updated day of 20th August and it didn't appear to be making an internet connection when run.

    0
    Comment actions Permalink
  • Robert Archell

    I have the MK700 keyboard and M705 mouse (circa 2015). On 2019.08.29 I downloaded the firmware update tool (v1.2.169_x64) and ran the update without any issues. The firmware for the Unifying Receiver showed as being v024.010.00036.

    On 2019.08.30 I replaced a problematic M705 mouse (not caused by the above) with a new M705 mouse that came with a new Unifying Receiver. I went through the process of unpairing the old devices from the old UR, installed the new UR and paired the old MK700 and new M705 devices to the new UR. All went well.

    I noticed that the firmware for the new UR was v012.011.00032 so I ran the the firmware update tool once again. After the process completed successfully, the firmware version for the UR is still showing as v012.011.00032.

    This question becomes, should I be concerned that the firmware tool did not update the new UR?

    1
    Comment actions Permalink
  • Nils

    After downloading the Unifying software I can also confirm the Unifying Receiver firmware is at 024.010.00036.

    0
    Comment actions Permalink
  • Robert Archell

    Thanks for posting Nils. How old is your Unifying Receiver? The reason I ask is because my UR from 2015 did update to 024.010.00036. However, The new UR that came with my new M700 device (which is supposed to have been released in 2018) did not update to 024.010.00036. The Firmware Update kept it at 012.011.00032.

    2
    Comment actions Permalink
  • Gratefully Medicated

    @RobertArchell

    Same experience with one of my newish UR's.

    New UR (2018) did not update to the new firmware. After two successful updates, FW remains at 012.011.00032.

    I have another 5 older UR's that I need to find and try to update. Will report back when I find them.

    2
    Comment actions Permalink
  • Nils

    @Robert Archell

    I got mine early 2017.

    Through a German site I found a link to Logitech firmware repository on GitHub.

    https://github.com/Logitech/fw_updates/tree/update2019-08-27

    It should confirm our Unifying Receivers, both of 012 and 024 firmware type, are at the latest version (browse through RQR12->RQR12.11).

    Why there are two different types appears be by the chip used, RQR12 for Nordic Semiconductor, RQR24 for Texas Instruments, but please don't quote me on that.

    1
    Comment actions Permalink
  • Alexander4884

    Why is the update not made available through the Unifying software?

    3
    Comment actions Permalink
  • Kevin Eckenrode

    Thanks for the update!

    0
    Comment actions Permalink
  • Alexander4884

    For the second time! Why is the update not made available through the Unifying software? Why not make this update available to all of your customers? Would you care to reply please!

    2
    Comment actions Permalink
  • Gratefully Medicated

    Bump for an official response from Logitech

    2
    Comment actions Permalink
  • logi_tim

    Thanks for giving us the Enterprise software to update our receivers! It makes it super easy!

    One more request, please give us a silent Logitech Options installer!

    2
    Comment actions Permalink

Please sign in to leave a comment.