Login Request a demo
HH
Product
Harmony Hub Firmware
by Logitech · last CVE Dec 20, 2018
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 3High 1Medium 0Low 0
Severity
All severities4Critical3High1Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Harmony Hub Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-15723
9.8
4%
Dec 20
The Logitech Harmony Hub before version 4.15.206 is vulnerable to application level command injection via crafted HTTP request
Affected: before 4.15.206
CVE-2018-15721
9.8
2%
Dec 20
The XMPP server in Logitech Harmony Hub before version 4.15.206 is vulnerable to authentication bypass via a crafted XMPP request
Affected: before 4.15.206
CVE-2018-15720
9.8
1%
Dec 20
Logitech Harmony Hub before version 4.15.206 contained two hard-coded accounts in the XMPP server that gave remote users access to the local API
Affected: before 4.15.206
CVE-2018-15722
8.1
2%
Dec 20
The Logitech Harmony Hub before version 4.15.206 is vulnerable to OS command injection via the time update request
Affected: before 4.15.206
Showing 4