CVE-2018-15721

Summary

The XMPP server in Logitech Harmony Hub before version 4.15.206 is vulnerable to authentication bypass via a crafted XMPP request. Remote attackers can use this vulnerability to gain access to the local API.

Affected Software

VendorProductVersion RangeStatus
LogitechLogitech Harmony HubFirmware before 4.15.206affected

Weaknesses

  • CWE-287: CWE-287 Improper Authentication

ADP Enrichment

CVE Program Container

Additional References

References