Logitech Unifying receiver: Difference between revisions

Revision as of 14:59, 3 October 2019

Latest revision as of 05:22, 29 November 2024

(47 intermediate revisions by 38 users not shown)

Line 1:

{{Short description|USB wireless receiver}}
[[File:Logitech_unifying_receiver.jpg|thumb|right|Logitech Unifying receiver (Olderolder)]]

[[File:Logitech_Unifying_Receiver_USB.jpg|thumb|right|Logitech Unifying receiver (Newernewer)]]

[[File:Unifying.webp|alt=Unifying Logo|thumb|Unifying logo]]

The '''Logitech Unifying receiver''' is an extremely small dedicated [[USB]] wireless receiver, based on the nRF24L-family of RF devices,<ref name="mousejack">{{cite web

The '''Logitech Unifying receiverReceiver''' is an extremelya small dedicated [[USB]] wireless receiver, based on the nRF24L-family of RF devices,<ref name="mousejack">{{cite web

| title=MouseJack device discovery and research tools

| url=https://github.com/BastilleResearch/mousejack#flash-a-logitech-unifying-dongle

| first=Marc

| last=Newlin

| website=[[GitHub]]

| date=2016-08-07

| accessdate=2019-07-25}}</ref> that allows up to six compatible [[Logitech]] human interface devices (such as mice, trackballs, trackpadstouchpads, and keyboards; headphones are not compatible) to be linked to the same computer using [[2.4 GHz]] band radio communication. Receivers that are bundled with a Logitech product are paired with the device at the factory. When purchasing a replacement receiver or connecting multiple devices to one receiver, pairing requires the free-of-charge Logitech Unifying software, available for [[Microsoft Windows]] and [[macOS]]. On Linux, the [https://pwr-solaar.github.io/Solaar/ Solaar software] can be used to adjust the configurations. Although not compatible with [[Bluetooth]], devices pair to Unifying Receivers in a similar way.<ref name=gallegos>{{cite web

| last=Gallegos

| first=Gary

Line 14 ⟶ 18:

| archiveurl=https://web.archive.org/web/20160304073820/http://www.gadgetstreet.com/gadgets-the-logitech-unifying-receiver-aka-fake-bluetooth/

| archivedate=4 March 2016

| url-status=dead}}</ref> Peripherals remain paired, and can then be used on systems not supporting the software. Logitech receivers compatible with the Unifying protocol can be identified by the orange Unifying logo, which also distinguishes them from Logitech Nano receivers. Nanoof receiverssimilar pairappearance, inwhich apair similar manner,similarly but only with a single devicesdevice, without using the Unifying protocol.

Logitech Unifying receiversReceivers (LURs) are often included in wireless Logitech keyboard, mouse, and combo sets, though theyand may be purchased aloneseparately. Some Logitech peripherals allow a receiver to be stored inside.<ref>{{Cite web|url=https://www.logitech.com/images/pdf/userguides/multi_connect_instructions.pdf|title=Logitech Unifying Multi-Connect Utility Setup Instructions|website=Logitech}}</ref>

A newer receiver named "Logitech Bolt" was released in 2021 that promises lower latency but is incompatible with Unifying products.

{{As of|2019|10}} Logitech Unifying Software had last been updated, to version 2.50.25, on 30 March 2010.<ref>{{cite web |url=https://support.logi.com/hc/en-us/articles/360025297913 |title=Logitech Unifying Software|website=Logitech Support + Download |date= |author= |accessdate= 3 October 2019}}</ref>

==Compatibility and use==

Each peripheral device can pair to one receiver per profile. While most devicesperipherals only havestore one profile, newer products such as the Logitech MX Master, MX Anywhere series, and M720 Triathlon, allow multiple profiles. These devices can be connected to multiple receivers simultaneously. This allows the use of receivers in several computers, e.g., a [[Desktop computer|desktop]] and a [[laptop]] [[computer]], selecting the computer to use by changing profiles on the mouse. This multi-computer function is further augmented by Logitech Flow (software KVM solution) which is similar to [[Synergy (software)|Synergy]]. For devices without multi-computer support, the receiver and input devices can be moved together from one computer to another, maintaining their paired status after being unplugged, as the pairing information is held in the little USB receiver<ref name="gallegos" />—this is much simpler than transferring the peripheral from one receiver to another by changing the setup in software, and also avoids the limitation to 45 pairings of older devices. This also allows the use of peripherals on computing devices that do not support Unifying Software, e.g. devices supporting [[USB OTG]] with operating systems such as [[Android (operating system)|Android]]: first pair to the receiver on a PC or Mac.<ref>{{cite web |url=https://community.musictribe.com/t5/Recording/Android-Tablets-and-Logitech-Unifying-Devices/td-p/236993 |title=Android Tablets and Logitech Unifying Devices|website=Music Tribe|date=7 January 2018|author=}}</ref>

Some older Unifying devices {{Specify|date=October 2024|reason=Which devices? How old?}} limit the number of allowable pairing changes to a maximum of 45 times. Once the 45th connection is made, it is no longer possible to connect such a device to a different receiver. For users who often switch a Unifying device between multiple PCs or laptops with individual receivers, this connection limit can become an issue. For example, a user who frequently switches a mouse between two receivers (e.g. at work and home) will quickly exhaust the limit of available pairing switches.<ref>{{cite web

| title=Limitations on Unifying devices

| url=https://support.logi.com/hc/en-us/articles/360023187214

| archiveurl=https://web.archive.org/web/20190710134058/https://support.logi.com/hc/en-us/articles/360023187214

| archivedate=2019-10-07-10

| url-status=live

| accessdate=2019-07-25}}</ref> Logitech advises customers with this issue to contact their Customer Care. Newer devices can switch pairings an unlimited number of times.

Pairing software is available from Logitech for [[Microsoft Windows]] and [[Mac OS X]] from Logitech. Wireless devices using the Unifying Receiver are supported since [[Linux]] 3.2.<ref>{{cite web

| title=HID: Add full support for Logitech Unifying receiversReceivers

| author=Nestor Lopez Casado

| date=2011-09-15

Line 40 ⟶ 44:

Software to manage Unifying devices on Linux is available from third party developers, such as Solaar.<ref>{{GitHub|pwr-Solaar/Solaar|Solaar}}</ref>

Many companies have made peripherals that connect via [[USB]] wireless receivers very similar to Logitech's, though it is not known if Logitech has taken legal action against these companies or even if Logitech holds a [[patent]] for the technology.; Logitech devices are incompatible with many of these "off -brand" receivers,{{Citation thoughneeded|date=October some are expressly designed as inexpensive alternatives to the Logitech Unifying receiver that can be paired with Logitech devices2019}}.

There are many different hardware versions of the unifying receiver. The most common is used for daily use, and is marked CU-0007 on the metal jacket. CU-0008 is distributed with gaming devices, and features lower latency.

== Security ==

Several security vulnerabilities of the Logitech Unifying softwaresystem andwere devicesreported usingin it2016 have beenand reported.2019,<ref name=vulerabilities>{{cite web

| url=https://github.com/mame82/misc/blob/master/logitech_vuln_summary.md

| title=Summary / Overview of known Logitech wireless peripheral vulnerabilities

| author=mame82

| website=[[GitHub]]

| date=2019-07-09

| accessdate=2019-07-25}}</ref> and patches released.

=== MousejackingMouseJacking and keyjacking ===

[[Mousejacking|MouseJacking]], first reported by Bastille Networks, Inc.,{{citation<ref needed|datename=July 2019}}vulerabilities/> is the sending of malicious radio signals (packets) wirelessly to an unsuspecting user through Logitech Unifying wireless technology. The exploit takes advantage of a user's vulnerable Logitech Unifying receiverReceiver and unencrypted signals within a range of about 100 meters. Possible exploits include:

* Keystroke injection by either spoofing either a paired mouse or keyboard

* Forced pairing

==== Affected devices Andand firmware ====

{| class="wikitable"

|+Devices

Line 135 ⟶ 142:

| first=Marc

| last=Viredaz

| website=[[GitHub]]

| date=2017-12-22

| accessdate=2019-07-25}}</ref>

Line 161 ⟶ 169:

| first=Marc

| last=Viredaz

| website=[[GitHub]]

| date=2017-12-22

| accessdate=2019-07-25}}</ref>

Line 186 ⟶ 195:

| first=Marc

| last=Viredaz

| website=[[GitHub]]

| date=2017-12-22

| accessdate=2019-07-25}}</ref>

Line 203 ⟶ 213:

| first=Marc

| last=Viredaz

| website=[[GitHub]]

| date=2017-12-22

| accessdate=2019-07-25}}</ref>

Line 208 ⟶ 219:

==== Response ====

In 2016 Logitech responded with ahas fewreleased Unifying receiver firmware updates as new exploits were reported.<ref>{{cite web

| url=https://support.logi.com/hc/en-001/community/posts/360032078393-Logitech-Response-to-Research-Findings

| title=Logitech Response to Research Findings

Line 216 ⟶ 227:

| archivedate=2019-07-09

| url-status=live

| accessdate=2019-07-25}}</ref><ref name=2019patch>{{cite web |url=https://support.logi.com/hc/en-us/community/posts/360033207154-Logitech-Unifying-Receiver-Update |title=Logitech Unifying Receiver Update |website=Logitech Support + Download |date=28 August 2019 |author= |access-date=3 October 2019 |archive-date=11 October 2019 |archive-url=https://web.archive.org/web/20191011034356/https://support.logi.com/hc/en-us/community/posts/360033207154-Logitech-Unifying-Receiver-Update |url-status=dead }}</ref>

| accessdate=2019-07-25}}</ref>

Linux users can use [[fwupd]] to flash an updated firmware. It will automatically detect available updates for any connected unifying receivers and many other firmware updatable devices. An outdated alternative is ''MouseJack''.<ref name="mousejack"/>

For Linux users there are native options to flash and experiment with such as [[fwupd]] and ''MouseJack''.<ref name="mousejack"/> However, with these tools a separate firmware binary is still required. Flashing on a Linux host via a hypervisor such as [[VirtualBox]] along with a Windows virtual guest image and the Windows Logitech update executable is also possible. If using a Windows virtual guest, it is recommended to have a second available pointing device while the dongle is being updated. The second pointing device may be needed to allow the user to select and enable pass through of the unifying receiver via the hypervisor task bar after executing the firmware updater so that the device is found and updated.

For Linux users there are native options to flash and experiment with such as [[fwupd]] and ''MouseJack''.<ref name="mousejack"/> However, with these tools a separate firmware binary is still required. Flashing on a Linux/UNIX host via a hypervisor such as [[VirtualBox]] along with a Windows virtual guest image and the Windows Logitech update executable is also possible. If using a Windows virtual guest, it is recommended to have a second available pointing device while the dongle is being updated. The second pointing device may be needed to allow the user to select and enable pass through of the unifying receiver via the hypervisor task bar after executing the firmware updater so that the device is found and updated.

Updating the Unifying receiver firmware to versions RQR12.08 or greater and RQR24.06 or greater can limit some functionality of certain paired devices unless the devices' firmware is also updated.

Line 224 ⟶ 237:

=== Other vulnerabilities ===

On July 9, 2019 another set of vulnerabilities was disclosed and documented by a different researcher.<ref name=vulerabilities/> A firmware update for Unifying receivers addressing the "Encryption Key Extraction Through USB" vulnerability (CVE-2019-13054/55) was released on 28 August 2019.<ref name=2019patch/> Some users reported in 2019 that some Unifying devices were still being sold that were vulnerable to the original 2016 [[Clickjacking#MouseJack|MouseJacking]] attack.<ref>{{Cite web|url=https://www.theverge.com/2019/7/14/20692471/logitech-mousejack-wireless-usb-receiver-vulnerable-hack-hijack|title=Why you should really, really update your Logitech wireless dongle|last=Hollister|first=Sean|date=2019-07-14|website=The Verge|language=en|access-date=2020-01-02}}</ref>

On July 9, 2019 another set of vulnerabilities was disclosed and documented by a different researcher.<ref name=vulerabilities/> Firmware fixes for the new vulnerabilities have not been released.

== See also ==

Line 235 ⟶ 248:

== External links ==

* [https://lekensteynwww.nl/logitech.com/en-us/resource-center/what-is-unifying.html Logitech Unifying for Linux: Reverse Engineering and unpairing toolSoftware]

* {{GitHub|pwr-Solaar/Solaar|Solaar}} - Linux devices manager for the Logitech Unifying Receiver

{{Logitech}}