Logitech: “Options” Craft WebSocket server has no authentication

Posted by diafygi on Thursday December 13, 2018 @11:38AM
from the bugs.chromium.org dept.

( 3 comments | 6 points | on HN )

Re:Logitech: “Options” Craft WebSocket server has no authent... by markovbot on Thursday December 13, 2018 @05:25PM (#18676695)

Does this pattern of vulnerability have a name? Where a piece of software listens on localhost but can be exploited by any webpage?

[ Parent | on HN ]

Re:Logitech: “Options” Craft WebSocket server has no authent... by border43 on Thursday December 13, 2018 @03:15PM (#18675625)

This is ridiculous. This is why I hate installed third party software on my computer.

Thank you. I have blocked all incoming traffic on that port.

[ Parent | on HN ]

Re:Logitech: “Options” Craft WebSocket server has no authent... by markovbot on Thursday December 13, 2018 @05:19PM (#18676654)

I'd be much more concerned about traffic from localhost (from malicious web pages)

[ Parent | on HN ]