Logitech Logitech Harmony Hub
4 CVEs affecting Logitech Logitech Harmony Hub. Latest disclosed: 2018-12-20. Critical: 3, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-15723 | Critical | 9.8 | 2018-12-20 | The Logitech Harmony Hub before version 4.15.206 is vulnerable to application level command injection via crafted HTTP request. An unauthenticated remote attac… |
CVE-2018-15721 | Critical | 9.8 | 2018-12-20 | The XMPP server in Logitech Harmony Hub before version 4.15.206 is vulnerable to authentication bypass via a crafted XMPP request. Remote attackers can use thi… |
CVE-2018-15720 | Critical | 9.8 | 2018-12-20 | Logitech Harmony Hub before version 4.15.206 contained two hard-coded accounts in the XMPP server that gave remote users access to the local API. |
CVE-2018-15722 | High | 8.1 | 2018-12-20 | The Logitech Harmony Hub before version 4.15.206 is vulnerable to OS command injection via the time update request. A remote server or man in the middle can in… |