CVE-2018-15720

Logitech Harmony Hub before version 4.15.206 contained two hard-coded accounts in the XMPP server that gave remote users access to the local API.

Score

CVSS 3.0 9.8 Critical

Status

Modified - vulnreport@tenable.com

Published

2018-12-20

Last modified

2024-09-16

Weaknesses

CWE-798

Affected products

• Harmony Hub Firmware (Logitech)
• Logitech Harmony Hub (Logitech)

References

• https://www.tenable.com/security/research/tra-2018-47