Unscored CVE-2018-15721 EUVD-2018-7591GHSA-wmf8-4j64-vgrw

The XMPP server in Logitech Harmony Hub before version 4.15.206 is vulnerable to authentication bypass via a crafted XMPP request. Remote a…

Published Dec 20, 2018 · Updated Sep 17, 2024 · Assigned by tenable

Vendor: Logitech Product: Logitech Harmony Hub

Description

The XMPP server in Logitech Harmony Hub before version 4.15.206 is vulnerable to authentication bypass via a crafted XMPP request. Remote attackers can use this vulnerability to gain access to the local API.

Affected products

Vendor	Product	Affected	Fixed
Logitech	Logitech Harmony Hub	Firmware before 4.15.206	—

References

https://www.tenable.com/security/research/tra-2018-47