CVE-2018-15722

The Logitech Harmony Hub before version 4.15.206 is vulnerable to OS command injection via the time update request. A remote server or man in the middle can inject OS commands with a properly formatted response.

Score

CVSS 3.0 8.1 High

Status

Modified - vulnreport@tenable.com

Published

2018-12-20

Last modified

2024-09-17

Weaknesses

CWE-78

Affected products

• Harmony Hub Firmware (Logitech)
• Logitech Harmony Hub (Logitech)

References

• https://www.tenable.com/security/research/tra-2018-47