Vendor/product archive

logitech / harmony_hub_firmware CVEs

Beta · best-effort

4 CVEs tagged to logitech / harmony_hub_firmware — 3 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to logitech vendor archive

CVE-2018-15723

Published Dec 20, 2018

The Logitech Harmony Hub before version 4.15.206 is vulnerable to application level command injection via crafted HTTP request. An unauthenticated remote attacker can leverage thi…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2018-15722

Published Dec 20, 2018

The Logitech Harmony Hub before version 4.15.206 is vulnerable to OS command injection via the time update request. A remote server or man in the middle can inject OS commands wit…

CVSS 8.1 · High

Vendor/product tagsBeta · best-effort

CVE-2018-15721

Published Dec 20, 2018

The XMPP server in Logitech Harmony Hub before version 4.15.206 is vulnerable to authentication bypass via a crafted XMPP request. Remote attackers can use this vulnerability to g…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2018-15720

Published Dec 20, 2018

Logitech Harmony Hub before version 4.15.206 contained two hard-coded accounts in the XMPP server that gave remote users access to the local API.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1