critical9.8
CVE-2018-15721
The XMPP server in Logitech Harmony Hub before version 4.15.206 is vulnerable to authentication bypass via a crafted XMPP request.
Impact
The XMPP server in Logitech Harmony Hub before version 4.15.206 is vulnerable to authentication bypass via a crafted XMPP request. Remote attackers can use this vulnerability to gain access to the local API.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Logitech | Harmony Hub Firmware | before 4.15.206 |