PT-2021-22202 · Logitech · Logitech S120

Ben Nassi + 4 · Published 2021-08-11 · Updated 2021-08-23 · CVE-2021-38547

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Logitech Z120 and S120 speakers through 2021-08-09

Description The issue allows remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, also known as a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, and its intensity is correlative to the power consumption. The sound played by the speakers affects their power consumption, which is also correlative to the light intensity of the LEDs. By analyzing measurements obtained from an electro-optical sensor directed at the power indicator LEDs of the speakers, it is possible to recover the sound played by them.

Recommendations For Logitech Z120 and S120 speakers through 2021-08-09, consider disabling the power indicator LED to minimize the risk of exploitation until a fix is available. Restrict access to the area where the speakers are used to prevent potential attackers from using a telescope and an electro-optical sensor. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2021-38547

Affected Products

Logitech S120

References · 4

• 🔥 https://nassiben.com/glowworm-attack · Exploit
• https://osv.dev/vulnerability/CVE-2021-38547 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-38547 · Security Note
• https://t.me/cibsecurity/27166 · Telegram Post